{ "Event": { "published": true, "date": "2026-04-24", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-04-24", "timestamp": 1777076126, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "81ad3ce5-6aa4-4cfb-8a37-dea279fa818d", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16862a84-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1777054026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777054026, "uuid": "d2f03338-ee8e-4715-bf74-69c31c0aec26", "comment": "Malware payload", "value": "3f5605d15ff19e86b136c29857d93101", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777054026, "uuid": "fa6b64ce-4a2d-48d1-bc8c-7306b75fa66b", "comment": "Malware payload", "value": "6d1a5e0ef0615180c6cfc9e2194a82c32b7992a3ec3073547170797515422eff", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777054026, "uuid": "a1b6a199-19c6-4cc2-a652-1d62a615f436", "value": "5473121623A92971627146F1E7FE6F8CE10D3A688FF16C247C217C68B93236E5CD8519", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777054026, "uuid": "73c1b84e-2535-4c79-ace5-6569fb29bb6e", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3O:yYI0ARqw1qAEv7UIFM8oJorFquyjkRkE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777054026, "uuid": "ce96dd7e-112d-42d8-9336-ecf15bf5ab53", "value": 73848, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16d3950a-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1777074355, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777074355, "uuid": "2c5a6fe8-548b-4c38-a47d-a781a585b34b", "comment": "Malware payload", "value": "4e9b89a618e755926424054b4d1a6953", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777074355, "uuid": "7b3a95d4-3f45-45d8-a59a-55ad51153dc7", "comment": "Malware payload", "value": "eaa08f7cedc2ed4a97fdff1e549b54726ae32832f1bcf0294b767f983213a157", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777074355, "uuid": "ac5ee22c-d80a-483f-bfc8-aaa9e3da0ad9", "value": "9433018623A62EB2D1319DF5A7FCFF89A04A7D949FE91C0A7C213659B47235C28C4C1D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777074355, "uuid": "ed483706-356b-4edb-be25-74c1ad004c62", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgsX:yYI0ARqw1qAEv7UIFM8oJorFX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777074355, "uuid": "aea0434f-f566-44b6-ab57-1b4dfd1db183", "value": 50680, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1776989953, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776989953, "uuid": "5eb15e2b-58e1-4456-9688-74eb8b6785b9", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776989953, "uuid": "a1d65b52-c486-4879-9ee1-b02f61162287", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776989953, "uuid": "11058da8-a24a-4d90-b2e4-6fcd074bd1dc", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776989953, "uuid": "dcb040bf-37f1-4958-92ec-0892edc3ebea", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776989953, "uuid": "b272be5a-9e6a-425b-b354-2c136ec6d195", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1777073540, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073540, "uuid": "1ad8a2b0-df41-494a-928b-be96bb1af7b8", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073540, "uuid": "ade3ac3c-4040-46be-a105-79accf991b1a", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777073540, "uuid": "6e00556b-9272-41f8-bfc7-2398fdf84393", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777073540, "uuid": "4058bc4e-72cf-445b-8956-a2a668f65b64", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777073540, "uuid": "fcc60cf7-32ea-4612-8fbc-42c9e0e47fc7", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776989287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776989287, "uuid": "b9aaddf6-8294-4e65-aee5-f80732ddaa02", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776989287, "uuid": "a4b59fdd-2ed7-4816-884d-a38eff4ff1e1", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776989287, "uuid": "026e11d5-cb88-4e83-b5ca-8c41116635d5", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776989287, "uuid": "4f0dc095-e683-4343-91b6-09080581a67a", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776989287, "uuid": "244d2972-3ee0-4840-8d94-c710272634a7", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1777031528, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777031528, "uuid": "82266e32-2c9e-451c-8fad-b5746790fdc4", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777031528, "uuid": "4f9f855c-e38c-44cd-8316-2e0b2e5c5947", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777031528, "uuid": "d2e3b8ca-1f41-477c-bdd0-5411a6918b46", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777031528, "uuid": "79a0181c-89c0-4a80-8ff4-5ee1dd35eaff", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777031528, "uuid": "caa2b240-b415-47f2-b1f5-dd5fb3938884", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1776989953, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776989953, "uuid": "0166eafc-9653-4e85-849c-3b43bd317547", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776989953, "uuid": "0e609dbf-882a-4935-a704-5fab75a3faf4", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776989953, "uuid": "a81e8386-e258-48f2-9d98-7f28cddbd581", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776989953, "uuid": "cfaa44cf-a651-40b3-9b7c-5472927b7a33", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776989953, "uuid": "9d0d8ee8-b457-403f-9b6f-48c37b955c2a", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a69d41b0-e780-11ee-b38b-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1777009358, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777009358, "uuid": "99664a71-76e0-46fa-9599-27734dca1aa0", "comment": "Malware payload (CoinMiner)", "value": "ca1fb1ad30189110cc225620dc537368", "object_relation": "md5", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "sality", "colour": "#dbe48b", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777009358, "uuid": "de81bf74-fe5e-4d91-bdd1-886b1840408b", "comment": "Malware payload (CoinMiner)", "value": "3fde84a46aea58ba4ddb5fb0473fc756ff209ba96b1a63a2759d13b8adc01a69", "object_relation": "sha256", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "sality", "colour": "#dbe48b", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777009358, "uuid": "0babd08d-828c-4bd3-a6c1-7b22a0305916", "value": "T1C4563395F0806422F13D183615BA84F2B07CFCB343654A9F539E2A756D383D9263AB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777009358, "uuid": "a4c6a831-aec1-4138-82ac-8d739d108333", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777009358, "uuid": "1473a780-aab1-4d73-b7a9-fc2c7cdd1d9b", "value": "98304:RLNSThOfTCiFBXmfFs+JhTpCVoR8oMEOJ6Ty3RvX+A0eVObApY:bBfTCiUsBVSLOJgyBG3KTp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777009358, "uuid": "25fded37-0340-46e1-bc4b-9e14050c654f", "value": 6227230, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777009358, "uuid": "64240127-ffe2-41bb-8333-6eb11761b6f4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "189a2a43-b7bb-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1777031470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777031470, "uuid": "61ee5e16-5f7e-4755-9165-0d68f8bb9146", "comment": "Malware payload", "value": "e89f75f918dbdcee28604d4e09dd71d7", "object_relation": "md5", "Tag": [ { "name": "@RawabiHolding", "colour": "#4a63f1", "exportable": true, "hide_tag": false }, { "name": "APT", "colour": "#cfa990", "exportable": true, "hide_tag": false }, { "name": "apt33", "colour": "#810f6e", "exportable": true, "hide_tag": false }, { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "darkcomet", "colour": "#3137d1", "exportable": true, "hide_tag": false }, { "name": "DarkGate", "colour": "#180653", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "impersonation", "colour": "#a2d3b0", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false }, { "name": "Pikabot", "colour": "#e499a3", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777031470, "uuid": "529944c1-084f-4e89-89be-ef2d636cf038", "comment": "Malware payload", "value": "6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023", "object_relation": "sha256", "Tag": [ { "name": "@RawabiHolding", "colour": "#4a63f1", "exportable": true, "hide_tag": false }, { "name": "APT", "colour": "#cfa990", "exportable": true, "hide_tag": false }, { "name": "apt33", "colour": "#810f6e", "exportable": true, "hide_tag": false }, { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "darkcomet", "colour": "#3137d1", "exportable": true, "hide_tag": false }, { "name": "DarkGate", "colour": "#180653", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "impersonation", "colour": "#a2d3b0", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false }, { "name": "Pikabot", "colour": "#e499a3", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777031470, "uuid": "c17b26c5-bdf0-4b89-a217-2a5d9c94f855", "value": "T1EEB092DDBC61E48018E535511EA3B60D146A22EBB9018B4018C00836A96035F8D0AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777031470, "uuid": "5a19a0e8-f3ca-44a3-b7c2-898e8d22d3d5", "value": "3:PouVIZx/XMn30EEBuvFfD0OkADYyT0NV9kBbZWM:hax/XW3/p5mmYyT0NVuB9d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777031470, "uuid": "72f716b6-038c-4c00-a222-42322f6a0a20", "value": 114, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777031470, "uuid": "c74d457e-b3cf-4694-bed7-69e945ea437c", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3063398f-c8e4-11ef-afe5-82aee05be84a", "comment": "Malware payload (TinyNuke)", "timestamp": 1777012747, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777012747, "uuid": "7b1bac1d-f566-40d9-9814-15d2da10ada4", "comment": "Malware payload (TinyNuke)", "value": "b7e00e7be81fefb7c57f2e5f9ba53310", "object_relation": "md5", "Tag": [ { "name": "91-92-242-236", "colour": "#ce3199", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "tinynuke", "colour": "#6e0287", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777012747, "uuid": "83880d74-2443-4f00-9f23-21bd8fc8d7c5", "comment": "Malware payload (TinyNuke)", "value": "4d2af9283f59dd98dc1852a5213d5092dd832c3e797c7ee57908fa9ff122983d", "object_relation": "sha256", "Tag": [ { "name": "91-92-242-236", "colour": "#ce3199", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "tinynuke", "colour": "#6e0287", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012747, "uuid": "e5b93a31-1a58-4dac-9ded-738cbc081318", "value": "T168B37D01F1D0C8B1D175053A1CA4AAF18E7DFDB08E599F9B6B8809B60F7C1D29634E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012747, "uuid": "5a4964d2-2438-4017-b7a0-2ce97eb420f3", "value": "efe9c653199957170a92ef694ca6f2f1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012747, "uuid": "2e41391b-bee2-4021-b644-937656954e0e", "value": "3072:rtwm5FikJSWy/Z5H3/nWSWyCsu2Z8mx6tWyEJQJW8chJeE:rWmPiKSBnVu2Z8zXt4JeE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777012747, "uuid": "bb43a89b-f750-466d-a0d3-d64f581df5cf", "value": 115200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012747, "uuid": "bc242c41-22e1-4dbd-9c51-d9b8ae1b5b70", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "baafe8c9-6f6f-11f0-912a-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1777049078, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777049078, "uuid": "a815f0fb-b2eb-480e-99e5-9a9b04e1c4d5", "comment": "Malware payload (CoinMiner)", "value": "9f71a1f040840c29e9470682640e308e", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777049078, "uuid": "d11358c4-e90c-463e-a486-9a2f5c5ed2fa", "comment": "Malware payload (CoinMiner)", "value": "cd437988e5c946c3032e9d90525c55a78728a5838906769b509ff55808aa71c5", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777049078, "uuid": "9c536db6-4beb-4a23-931f-289e05894cf3", "value": "T124C53301C38FDA8F7B55E7BE1209A794BD4D44964EB9A39D9937F0738FB4CA610202", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777049078, "uuid": "762666b4-7854-4447-ba92-6ff08046b112", "value": "49152:CkGSvy3DUQq4587hVTCu1FQYTQLrN89Tmki+8nnrr1FwC:tAn5o/TjFQf8BmtdnnN+C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777049078, "uuid": "e5faf6d4-3078-4506-9700-e47237b3f81d", "value": 2654112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777049078, "uuid": "1aeb994e-052d-4cec-84f9-7fa8f78806d6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5f5ffd8-2ba6-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1777070355, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070355, "uuid": "5f54ed16-b8d1-43bf-b065-350156c52c29", "comment": "Malware payload", "value": "e4e020a47fb529f5433b0f35ac10c6cb", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070355, "uuid": "5f6fbe9f-b705-4b62-b924-7c15d0e8925a", "comment": "Malware payload", "value": "5ecfdbd16a4c19e21393c831e65a935ea165ca3507086520bd8be98663f6ba56", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070355, "uuid": "c229c4aa-527c-40c0-ad89-71f008089f97", "value": "T123C42304340641D5835A2B1EAEC4E7E0BEB560DBFA1CF940AADD7ED06DE92A177C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070355, "uuid": "c483c9f4-343d-4377-b664-ae1560cf2666", "value": "12288:T6wlOMWROC/FTeHo22Qm7NzofOr68m8eA924EwCO:L4MQOC/gHozN7NzomW86A9p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777070355, "uuid": "d54159a5-62b3-42d0-a7f7-e57a597b85be", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070355, "uuid": "f125e41a-9311-4d94-a950-e495e66eaa31", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96a6260f-3a60-11f1-bc00-82aee05be84a", "comment": "Malware payload (SantaStealer)", "timestamp": 1777059258, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777059258, "uuid": "e1ea1573-68f9-4afa-b522-c81ce829bdd4", "comment": "Malware payload (SantaStealer)", "value": "eab63c490102d94c5a3b3914195c3530", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777059258, "uuid": "afd6f3e1-55b7-4725-89d2-98d6f6b0f73d", "comment": "Malware payload (SantaStealer)", "value": "8f3ddbc6090f6bbb75805de8ca284953696e283b438cfa9a45c3713c6ebcb70c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777059258, "uuid": "53b177ae-e6ff-4202-81a0-915972c54b73", "value": "T18267E0DBF60DB9B4F315956AC7D0EA086F8FF8B180E391A001D11B3396AE946DB874", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777059258, "uuid": "12355b85-3afc-47d0-b4cd-ee4cb9f0a1a5", "value": "5db62f1c7bafdda66124cfde5230bea0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777059258, "uuid": "fc831e6f-e29c-46a4-b526-7b1a5efa43a5", "value": "786432:hP1TC3oQmx3imvWEmBjsWdMruJZrize+SkjRn:p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777059258, "uuid": "7e6a77ef-b696-469f-b65c-5a2802538935", "value": 30016722, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777059258, "uuid": "6a1f8ee6-d1d3-43ee-b7fc-54793a5d818c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87d80131-3f71-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776989226, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776989226, "uuid": "2357ca64-90f7-4759-85ca-0a6893bb7e12", "comment": "Malware payload", "value": "7f365e66b6c4ad2c772103d07b7797a9", "object_relation": "md5", "Tag": [ { "name": "pw-9912", "colour": "#fcd0f6", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776989226, "uuid": "e942872b-bdac-4f4b-9f18-240aa6582e9c", "comment": "Malware payload", "value": "4a988cb0dd376e4a1c58e877df799b6b991ff31592a78e011d50167ef935f681", "object_relation": "sha256", "Tag": [ { "name": "pw-9912", "colour": "#fcd0f6", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776989226, "uuid": "474dfbf4-0713-4ffb-97fb-a22f097ca0be", "value": "T1B7E6336F3F2E6073F511ACB6808EE952DFA15DECC2968AB99111A808FC35D9D1C263", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776989226, "uuid": "79b42f19-2fa6-4480-91f7-6abd119c9188", "value": "393216:ZkTcV2bhWqitjDeXoZg2v622oQs/7TGdZ:a4V2bgqiJDekvD2oQs0Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776989226, "uuid": "6b00dfb2-5e83-46e0-a2e2-13d0d5ad38c1", "value": 15129438, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776989226, "uuid": "5ad67e1b-a201-445a-956b-6c836f2326e6", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6134ef66-3f74-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776990450, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776990450, "uuid": "39c1d875-4a79-4c60-b609-5cf5f2971aa1", "comment": "Malware payload (Mirai)", "value": "f2891d688c695c45e0cd76a4c65d1cde", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776990450, "uuid": "6f80e94d-dd52-4b49-8b81-cd83a4a5a710", "comment": "Malware payload (Mirai)", "value": "f392af839e6a0568b12c9f9b4be9b2d4b30c894fae7e5aefd10701e9cae69e9a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776990450, "uuid": "3d199532-3b42-47f1-8a0b-8b9d11a380a7", "value": "T1B3D3433E7E21AFBFE178823007F75E70D75929D626E18244E26CF6085E7128D185FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776990450, "uuid": "040d6b9f-fb00-4321-9cb8-1099a459cc96", "value": "1536:byp/QQWYhX3faRU6pBbu5DTCBLmjbbnUEYvqlT3WqoZLmNSwdgpfvFWnF1feRTdw:t59C3lTmqoZgSwdgB4F1aTsIHy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776990450, "uuid": "9765c566-d858-485b-bcd2-9efb4f468694", "value": 131464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776990450, "uuid": "90802486-67d9-4a20-9882-86fb1043a450", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5937b4d3-3f99-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1777006328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777006328, "uuid": "943422d0-49c7-4e93-b60b-8c612e5a63a5", "comment": "Malware payload (Gafgyt)", "value": "3c99a6db1b6276c34c8e2edaa0a30a06", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777006328, "uuid": "04733888-4718-4a9c-b589-f6f65d45a41f", "comment": "Malware payload (Gafgyt)", "value": "005067d66ac14c10f867ab81855016e1ec2bb6e705e04afd8197cc9a5c95d524", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777006328, "uuid": "2b341154-dfd0-4725-83be-6974002d7d6f", "value": "T104549D077B8A4DEAC62DC3B20EEBA3108B13F0350712E79F37646A647F4A79C6C585", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777006328, "uuid": "209e1b96-2e64-410c-b3d5-089c60152576", "value": "6144:HOd3iYi3XmEiIrlG+nQbMk59QlknPDM+k6ZxPOaP0rbyjbpblTE3TqjjicmmkZa7:aEK+n8Mk59QlknPDM+k6ZxPOaP0rbyjZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777006328, "uuid": "b2fd05eb-304e-43be-80ea-d9e2930331e2", "value": 300498, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777006328, "uuid": "47c9ecf4-223d-476e-a4be-782aaef6048b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57f7ebea-3f9b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777007185, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777007185, "uuid": "97c3e150-6628-4312-952c-d1101c1392dc", "comment": "Malware payload (Mirai)", "value": "efd189c33be4cd82f6e829175b945387", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777007185, "uuid": "b11075c9-5400-45a9-82e4-fcbbf82b3a98", "comment": "Malware payload (Mirai)", "value": "b6a0ae0f7b27ba1aa7624d55aed39f1229b8039286a033451b8a89829ef40998", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777007185, "uuid": "48e7519f-a10c-477c-bb77-c981af1ea076", "value": "T18A630216B08D03BB41908D366D7CE7A697420EBCD0EB392FA81DDC98BBB1D221CD5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777007185, "uuid": "c26a5f7d-9ec8-43c5-b623-ebca5406e1b0", "value": "1536:SXU8q/lJ7PnwnozmAop9d/t/5pf2ETnHBpVnbbwYmUOAkE43Pd:SEX/lRnwoz5Gf/tx9DvtbwdU6L/d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777007185, "uuid": "fafcf108-4e61-4e91-b133-a51841d68aa0", "value": 69656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777007185, "uuid": "c830b46a-454c-4992-97c0-1bd0d8d63568", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc2f1240-3f9b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777007353, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777007353, "uuid": "1a5db79c-b8d9-4a7c-b489-aaa5b69f2b5e", "comment": "Malware payload (Mirai)", "value": "7ea8d2fc0f1e0d627cd1e56197926259", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777007353, "uuid": "527959d8-2d07-4dcc-b77c-b4dcfa8ee9cf", "comment": "Malware payload (Mirai)", "value": "ac48eac307da45bfbb2fbbd9238ae75cf83367e27ef89f61db0d75366714fbe7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777007353, "uuid": "50467b26-b567-41c6-a155-4eb721f2cfad", "value": "T13D4301CEDC568DC7C46FA0B62BCADCDB617D964DA66801C0DE58273B83D3948136E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777007353, "uuid": "d6a22642-10aa-4e28-8486-c267342087bc", "value": "1536:Q6uvGGbYdFOJwNiEAPjMVdRarfjaQlJ4Ef/nouy8S:QnuGbEFiwoEAPjQnefjb9fvoutS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777007353, "uuid": "98461b58-1a83-4ad2-b416-458e5d42a196", "value": 57616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777007353, "uuid": "1b2900a3-a810-443d-bd23-ac8e8313c05c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13102617-3f9c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777007499, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777007499, "uuid": "4e533722-00f1-4463-bf6c-52e0b453846c", "comment": "Malware payload (Mirai)", "value": "7eef087a18be5981506645220e08f78b", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777007499, "uuid": "8d62e173-2cc0-4fea-ac61-d8cba517b172", "comment": "Malware payload (Mirai)", "value": "ec41a35c7df2a684c7a97da730d93c63a15dc34f619474e8cc03fd7afe063ef4", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777007499, "uuid": "4eb7a5a9-dfb6-497f-a91e-4cee5d02c6cf", "value": "T19F53025408C152D2EEF2ADB4BA5022840712CC36D5F3FE41786859E865EF742AC7EA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777007499, "uuid": "3faec6b3-e39e-4250-8ca6-bdef551f34d0", "value": "1536:nKv6rW/nzBIxdCe+BQi2PrSFZZVxBXLtOgK2sD:nMkwnzeeNOBPuNXLtE5D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777007499, "uuid": "347651d5-eeac-4013-a905-9373a2b09f62", "value": 64112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777007499, "uuid": "6263d28d-a903-4bc5-a582-8a64fb111a1b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2857eb0c-3f9c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777007534, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777007534, "uuid": "750fa1d4-8738-438b-a18e-ca67639531a0", "comment": "Malware payload (Mirai)", "value": "48871c10de6e8a2cd61806ef49b91d41", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777007534, "uuid": "e4ab577c-44e4-41a9-990f-908619ef5766", "comment": "Malware payload (Mirai)", "value": "69a3f8207de0386d28e743b27f532b3413d83f5b57b88213f633c6061fdb3361", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777007534, "uuid": "f1f6551e-35a4-4339-8d38-91905281faa3", "value": "T10963022D5727C1BDF6A7237F8A7646C43FA046BA94554F473016C366CA8349C38A3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777007534, "uuid": "a7a6864b-8495-451d-9939-a3eea1d94d9f", "value": "1536:UNbGBpdlMjmZ1vOaajCCyvcqtCX6ldLL3hfqGrdZDyVSz:UN2dsmZ4aqCCda0qxvDyV4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777007534, "uuid": "19b03776-a2ba-4d6e-91f1-fdb607269c90", "value": 70304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777007534, "uuid": "ee474486-d4f1-4bce-9554-ea4bdec21a71", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "896a44e5-3f9c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777007697, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777007697, "uuid": "265601af-bfbd-40ff-ad2f-b2545a36023e", "comment": "Malware payload (Mirai)", "value": "4b13b525505ff5fc003c22a9382a7bc0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777007697, "uuid": "bff3f769-9ec8-4e12-bb6b-f1a8490adf2a", "comment": "Malware payload (Mirai)", "value": "66273723b54321eaf2581cdf7d2bf1d5f747fd3d4fbb3c61785b002ccf8d96d8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777007697, "uuid": "6a901dc6-96f7-4afc-8906-1e2b1d9a2de1", "value": "T1A934E791A4118ADFCE0158FA77AC4F342B817C70861B1FBD5D5194A8A28F8DFF1C6B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777007697, "uuid": "06c008c6-ebe3-4770-9ec0-efb391fcb95c", "value": "3072:+crNi7iPQo7OTnrdGcgIP6E2S5GdqlXs3locdWndRZItX:+cJwielVgIyJS5GdqlXCfodktX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777007697, "uuid": "13eda9e6-38f9-4c75-a12c-a83b1a5073ef", "value": 251172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777007697, "uuid": "37601a55-b368-488d-b002-1f1f544ef931", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "75e2911c-3f9d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777008094, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777008094, "uuid": "ab45a805-c3d0-47f5-8ff0-a7b6dfe5ae69", "comment": "Malware payload", "value": "ba56ea56b079a750e43af2688b96d201", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777008094, "uuid": "75d9cb4e-b912-47f0-a063-7dfed0c86b31", "comment": "Malware payload", "value": "1bde358e28aed0805f12946c2a8995da1b986f59f75a332e121d78948e2c5516", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777008094, "uuid": "148b6768-538e-4c94-b3f7-57bc287996e6", "value": "T1F7530210C1700DC8D0FEAF9B4A65B335EF715EF876A3C4F224D2D961F066C688A856", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777008094, "uuid": "00a4b3cb-16d5-4fc2-b208-fcbcb0131b2d", "value": "1536:EkiUPzu+RfXY6li/0lbsj58R+ZrBHshWDZBHV2NJG0OF7uaEyL24u+qgw0VuL:I65RfoqS0lbC57ZLDZT2NJGhzf24u+qx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777008094, "uuid": "4881deb0-70e5-40cd-a496-66a4a9f33b58", "value": 64264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777008094, "uuid": "a2fda156-e72f-45e7-8288-45c48e2c50a7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19c5121d-3f9e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777008369, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777008369, "uuid": "5c1e41ea-a85f-48ac-bfba-2c9593d37005", "comment": "Malware payload (Mirai)", "value": "bba2925487c609018029ab23f32038f1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777008369, "uuid": "039d8e55-0f5a-43a6-8a53-6085667f39b4", "comment": "Malware payload (Mirai)", "value": "01e6c07cd6d6f7c9b5d9af76eb1631ece66ac36c627668101cf2498b7e577273", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777008369, "uuid": "806fd8af-0340-4ab2-ba9d-33f9228f4cb7", "value": "T1F263F19DA2EDF491C7BC6CBD752CB61922041DC364DA0B9D93304C99EB4272D3ACB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777008369, "uuid": "32572456-e96d-4524-b2fd-9e50c6829119", "value": "1536:adIiaKp5QviVOtdYlregVIcAvbf1vvFjgBuRSSdbzVaSsTcgJ/0:adIV4OtdYLigQR/1VMa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777008369, "uuid": "cb01e7e0-7f6c-43a0-81cf-d70f14eae3f0", "value": 73188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777008369, "uuid": "7363748a-389e-4da7-b73a-57fff365a8b4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fdfddcd9-3f9e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777008752, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777008752, "uuid": "bfe0c38d-2a9f-4807-bcfc-ffefbe680d25", "comment": "Malware payload (Mirai)", "value": "686be8f9723ec43b7c8b51cca52fc5f4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777008752, "uuid": "0bade3a0-5cec-42bb-8c1c-61b9bca3b441", "comment": "Malware payload (Mirai)", "value": "a530187d666f996d308daea3f08eeeb6d67252bf2f491babd3815b882c265246", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777008752, "uuid": "ecc573a6-bc78-4c6c-852b-04075930e351", "value": "T1A9830236E02FD97DD739DD7068460B12FAB2FD659571084D1A903BCD4FB22542D2CE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777008752, "uuid": "8426ce71-3d7c-4667-a054-fe65ce33929a", "value": "1536:5BB4acZUgIg9Lqpxk8vwgDHb9VAA1/dft9FoGDUNif6zKGlexNVEyfvNUjMz:VNcZAg9GpxDvFrZVAcV7oif6HXkUQz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777008752, "uuid": "389ef1e6-2392-4dc2-bae2-a50ededcd9f9", "value": 87800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777008752, "uuid": "d12463c7-f4dd-4483-b9bd-36091830f5f0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f34b8b0-3f9f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777008808, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777008808, "uuid": "985337a6-ea0a-4dba-b6d1-d912bfec0a4e", "comment": "Malware payload (Mirai)", "value": "361b7cd3bef99ad60b9bd3129d107e63", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777008808, "uuid": "b1b21dda-5a72-41f7-8d23-5d1770f91fed", "comment": "Malware payload (Mirai)", "value": "f40e7d990ef4a2b9e7b3444eb480968ffa74b608779920e63ed5ac246825eedd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777008808, "uuid": "68047b26-5cf9-4b8a-a9df-6d0d3cf49936", "value": "T13E530222F61AFE27E3D145BD2DCD541E12C358688266747B6A69C23CFD0124BB8B73", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777008808, "uuid": "9ed9fe3c-acef-4718-b4c4-2eac2e1f70b9", "value": "768:0e+C6bEgNLnC1ie449ACfLxCXMyrbXqP184JN4ZzbozDxUzvA/EYuqKs4wDg/Fii:0ed6YgNLQ7X6vrbsKpGCvA/EY1YNcHBW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777008808, "uuid": "17712acc-b8a1-4c9d-af14-f5a2ceb82c1c", "value": 63204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777008808, "uuid": "61c56109-6422-48ec-9303-56f22b2e1dbf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "36e219d4-3f9f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777008847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777008847, "uuid": "bb6e37a5-6401-4b47-a227-f733e97b98e2", "comment": "Malware payload (Mirai)", "value": "105b8eaefefa94a9fbfdf0f41762279a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777008847, "uuid": "af3c7f99-174d-41dc-952c-5b515f7d7ed9", "comment": "Malware payload (Mirai)", "value": "f23b456e8367faa29e586ba1463c9686cac03c6b6720685908a0600c64f924e2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777008847, "uuid": "1355b4a0-edb5-4704-b179-fcf2df3a933c", "value": "T10F5302A186CE7A75B70004BBC99F85C3B7C1573453B6A5B82105CD4FB50B62535ACA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777008847, "uuid": "aa90fc8c-6f33-4283-be4a-9c195ed12d85", "value": "1536:iOwGH7aTG7okygtnSfzCjVAZxW12hpAJtpdU:iOwhTG8kyYSWVASXJZU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777008847, "uuid": "5a6d48cf-445f-499d-be35-1be6a73e464e", "value": 65928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777008847, "uuid": "a05a1652-dbf6-4346-9fd0-34bded4d14ea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf11929c-3f9f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777009103, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777009103, "uuid": "4f10cf83-e40d-4c86-bcbb-5b815ac13254", "comment": "Malware payload", "value": "39d3c3d259c59b66daec85494eb5bff8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777009103, "uuid": "f5adaa4e-73b7-4df6-aba0-f104fa01f893", "comment": "Malware payload", "value": "9d473ceb411460fb49d840d036ac56a17632b096b44b1de98affb20d28836c19", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777009103, "uuid": "1b7d8c59-271c-4d13-924f-112dcb8d8231", "value": "T1CB93193178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777009103, "uuid": "f7e74f6b-7061-4727-bc7f-cd98aecff2ad", "value": "1536:nByp1tF/uwMmAIa14oX/KIlepeV7tb73WdxCrCitkb5fv2v05xWjrIKO/s1kKzrW:n8JIe0GitkbFv2v05xWjrS/s1kIrty7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777009103, "uuid": "14d5a8f9-af3a-4add-8262-18e68025581b", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777009103, "uuid": "f7f328be-012d-4309-887a-300d9db06b54", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4eb2dd8c-3fa0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777009317, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777009317, "uuid": "66bc63fa-d177-49c8-b066-4c70b3ee4aec", "comment": "Malware payload (Mirai)", "value": "f09ec9a8c231825bdd92e4ca715ba203", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777009317, "uuid": "a4d964d8-8cb0-4461-8ab6-39aaed93be5c", "comment": "Malware payload (Mirai)", "value": "640b19b8dd91986eb609c7323946b4252a2477e3c87b9f725aa61f593f19a635", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777009317, "uuid": "fe98aaad-1623-49fc-8ce0-24fc917061d5", "value": "T19A246B537B878FA3C2246A754AF382385ADA3B170AA3C4D7C3B95B0167559903C2DF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777009317, "uuid": "bd24c1b4-4a4d-4773-9070-038166b02e82", "value": "3072:jNu1SLWsx707Gb7oZR5+BZUMzKoUvo4GK+RABKEjnM+w1qgTU95F2Mn8j0w6j:k1SisYk8ZR5+R+vQXEjXwtYQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777009317, "uuid": "ca6c460c-e1e4-49dd-a0c9-d6b3d5c29141", "value": 218184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777009317, "uuid": "d5f31c62-491d-4a4a-8f24-3033feb6b13f", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e95d8073-3fa0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777009576, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777009576, "uuid": "c6e976fa-d888-4af2-8463-e4c064179c43", "comment": "Malware payload (Mirai)", "value": "6f16787976cc8a4420e2eca154d36cba", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mossadbotnet", "colour": "#70c6b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777009576, "uuid": "490e5a77-acbf-4b8f-980f-072779cf46d6", "comment": "Malware payload (Mirai)", "value": "61e2779702fbe93e41d2127a7f9a8ed4cd1c22d16e5af1b47c5f73be21b34ff2", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mossadbotnet", "colour": "#70c6b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777009576, "uuid": "1881dfc4-1790-47f3-aa20-17fbd55bf41c", "value": "T1305423E7CD0252E02035C7B3398E54D362616B88FD9C2C468C7AF4A49FEA5DF0275B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777009576, "uuid": "47ab9243-3049-492a-87bc-2dccd7042cce", "value": "6144:1RrkQjdkJRjBrP2KsCwVZHpcMifEHK1tk0wEmG9aXwTchfu:1eqODwHPifEHK1y011Tchfu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777009576, "uuid": "eea54653-03bd-4e95-8e34-61f235e8a889", "value": 280600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777009576, "uuid": "75cb3bbd-1000-4b89-9b2a-173120566b5f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52d36323-3fa1-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777009753, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777009753, "uuid": "e654ae87-b246-4a3b-ab89-04297d214d76", "comment": "Malware payload", "value": "f150bdd7adb490c8fb926dd243bd5d9a", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777009753, "uuid": "aeb4c867-c4d3-43f3-a2a8-bb7c2d28efd5", "comment": "Malware payload", "value": "9fd5d37eea2a4365501465a2466c740ca2624e5ff56945f8ea0ecf1039ca825c", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777009753, "uuid": "1ce384ce-3d4a-4237-902d-f8fef124f4fe", "value": "T18F32F963A6CB4D9B83C3D793D2A6D71AED6C808D841559C8F1ECC7836024E345788F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777009753, "uuid": "fe92235e-df08-4cb6-b6df-3b27c1c7d178", "value": "192:UgoNNtSVUqAys5r2wg1VPHsscuy/MtfHOf39zGrabHah+ACHQpmq2:UgWNtJqAys5pg3PHsOyFFzFW0c2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777009753, "uuid": "ba978fe0-f289-42e8-9933-3090c43ad7b5", "value": 11544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777009753, "uuid": "53bc25b8-6067-4649-9ca4-3e3166aa5571", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3a4ef93-3fa5-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777011687, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777011687, "uuid": "3d04860f-1aaf-41ff-84ce-c6fdc76b0d68", "comment": "Malware payload", "value": "3b76bd4e74cd7295610ec162cdfeaaf5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777011687, "uuid": "92c6d63e-f21e-48e1-86e6-51a68134de31", "comment": "Malware payload", "value": "a43d47cdd979a2d22a5ca513cd28b376802afcf96bea135b745788ddbecaa4a2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777011687, "uuid": "afd1bd84-f0c7-4fa7-9446-35c1a4134dc2", "value": "T1AC243CA3FC01DEBBF81FE3B285534C19B230FB6128531A3661A3BE9759350D56923E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777011687, "uuid": "24c04bd4-41a5-4a5d-a816-f61347609ab4", "value": "3072:vr+HwlBbqqKz2lF6jIpRkrPyRyy9Q2pERGFT2l3vlTxpV/VIjbigLer2gA2p4:hCqSIFN4y9JpESTShxpGLerx2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777011687, "uuid": "ac1e2b9b-a274-4226-80a9-5933676ff86e", "value": 219764, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777011687, "uuid": "6f284349-e24e-437d-b394-f1653db644d2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05aecc5a-3fa7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777012201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777012201, "uuid": "413e65cd-7266-4b0b-89f2-eb43f6a0023b", "comment": "Malware payload (Mirai)", "value": "993543629d9b919c6aebe35d5f071a4c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777012201, "uuid": "686e8e37-2952-4f68-bd3f-bd83f3743330", "comment": "Malware payload (Mirai)", "value": "2639cea58eb054074923f9864d0ec50513c0a8d2896d0a2cb6bef80ee3443500", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012201, "uuid": "8ab24ab4-f096-4e29-9572-43389990cdf6", "value": "T1A1830249D90D0173DDE2D6F46CDCC3A09C100A7EEF9ABE8404A4DBE4A910609FEE92", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012201, "uuid": "efd95627-85dd-409a-9b5b-45b1a2d34729", "value": "1536:B9HPxtCWQYqKt4H62wPXvMVujIjABrSU81MJq16caC4Vhc5ZSZYtM/eAEVK2KzkP:BhPxIbYqKjfPXvMVujI4rJ8soJ4cZmVy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777012201, "uuid": "2878933a-e80c-48a6-be94-5f48c407dbbc", "value": 84500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012201, "uuid": "1de6b594-f0db-46ee-81c1-57d34b108080", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b188a3b-3fa8-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1777012747, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777012747, "uuid": "3ba1d439-a556-4f02-a992-729e35950292", "comment": "Malware payload (ConnectWise)", "value": "0eedae0d6f73521733fb032355a4f275", "object_relation": "md5", "Tag": [ { "name": "178-16-55-93", "colour": "#afd33a", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777012747, "uuid": "3a9999a7-e771-4d47-876d-66f8c2be74c0", "comment": "Malware payload (ConnectWise)", "value": "2fbbe5a1790c35b582facc4ac1e7b71cc50ab6c0fde7c426f13d168d25b44e22", "object_relation": "sha256", "Tag": [ { "name": "178-16-55-93", "colour": "#afd33a", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012747, "uuid": "b0c7bbc5-3e03-4bf8-9028-700f9c696d59", "value": "T1A2646C11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012747, "uuid": "47288843-66ed-4172-aa6b-e68bd2913d87", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012747, "uuid": "219683a4-b14b-4fb4-9852-b529164d9b28", "value": "6144:SmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9:x1iw7gryNkSV1hy1Z1u2JLu9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777012747, "uuid": "f140bb5d-b296-4ae3-a439-1ab1e8b481e6", "value": 312512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012747, "uuid": "77bccf7b-3259-4749-a5c1-227e07deae83", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b1c5c8f-3fa8-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1777012747, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777012747, "uuid": "2b8403ac-944a-4bb6-bb97-691713088278", "comment": "Malware payload (ConnectWise)", "value": "2e15f9a746ed38ee71ab0efa73d7431a", "object_relation": "md5", "Tag": [ { "name": "178-16-55-86", "colour": "#131115", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777012747, "uuid": "c30d5530-2651-4cc7-9868-6a475dcd790f", "comment": "Malware payload (ConnectWise)", "value": "b82814dbe62ca1bd6c2f3ff27a3c4b398b72aaaff2fd94c343dd6159086b7389", "object_relation": "sha256", "Tag": [ { "name": "178-16-55-86", "colour": "#131115", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012747, "uuid": "19f3b84b-9e2f-40ff-b45e-de1040a23d35", "value": "T153646C11B9C48432C673383107B9E2B28DBDB8301D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012747, "uuid": "4fdc314e-8f71-401d-ac30-ec93a269ff10", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012747, "uuid": "687fa336-9874-480c-90c3-2c25ebc123e9", "value": "6144:NmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFti9M4:o1iw7gryNkSV1hy1Z1u2JLI9v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777012747, "uuid": "e98d0e43-f94a-4d42-afdc-08eacd433686", "value": 312552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012747, "uuid": "e8944dcc-2a3d-4446-9e02-b4a8aceb6ac8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b4fd61e-3fa8-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777012747, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777012747, "uuid": "7da2e73a-0f91-48af-881d-7b96bfd66833", "comment": "Malware payload", "value": "068f0c342defe33e4522b91612185a45", "object_relation": "md5", "Tag": [ { "name": "178-16-54-224", "colour": "#41e68c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777012747, "uuid": "500ad993-46cc-44b3-a60f-6a09cc624740", "comment": "Malware payload", "value": "0e2433cdb9d3669b9fa1cd7e342fe865d9f2b5793b01ab62a41c223b07f8eaf9", "object_relation": "sha256", "Tag": [ { "name": "178-16-54-224", "colour": "#41e68c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012747, "uuid": "e02cb526-6d6d-4019-908a-df5155b32b0a", "value": "T1B8646C11B9C48432C673383147B8E2B28DBDB8301D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012747, "uuid": "b4bbabfd-3a92-4102-8aef-0ee22db80ca4", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012747, "uuid": "6b47f0dd-8263-42e5-8844-61ffe1bbd0f7", "value": "6144:4mlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFti9Q1:z1iw7gryNkSV1hy1Z1u2JLI9Q1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777012747, "uuid": "96686da4-c6de-48bd-b742-d3ac71613a07", "value": 313992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012747, "uuid": "6e313ca4-0ddc-4d45-b385-bbb2da042e92", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f4481b2-3fa8-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1777012807, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777012807, "uuid": "c2739259-776c-4511-853c-42c2fe2e41db", "comment": "Malware payload (ConnectWise)", "value": "0e5e472baea41b9000e83f3ed934cc37", "object_relation": "md5", "Tag": [ { "name": "178-16-53-72", "colour": "#d4d36f", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777012807, "uuid": "9159f198-20b7-45f5-b564-614136d44a28", "comment": "Malware payload (ConnectWise)", "value": "925608479018b576b75f215913436626d812dda3c2acca4f8aa0d09426637a37", "object_relation": "sha256", "Tag": [ { "name": "178-16-53-72", "colour": "#d4d36f", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012807, "uuid": "022e0391-ad92-44c1-8cea-f69ffad68e70", "value": "T131646C11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012807, "uuid": "2748cce6-c40a-4010-abd2-1c842f2b9648", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012807, "uuid": "cd363d00-18d0-4cc3-a8cc-41d6bb64cdac", "value": "6144:9mlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFvi9oPJ:41iw7gryNkSV1hy1Z1u2JLa9oPJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777012807, "uuid": "88aef98e-3448-4a1c-a0f6-34bcfc01490e", "value": 312552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012807, "uuid": "54381814-34b6-417b-a071-d0e30c939649", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f811bd0-3fa8-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1777012808, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777012808, "uuid": "8e5f664e-2829-4e0d-a41d-0283d83b71e1", "comment": "Malware payload (ConnectWise)", "value": "3ecc140ff8e73d835426dcb5a6cbced3", "object_relation": "md5", "Tag": [ { "name": "158-94-210-6", "colour": "#871697", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777012808, "uuid": "580907f6-e271-46ce-bab8-edbb87544cae", "comment": "Malware payload (ConnectWise)", "value": "1d688781a79012c8db3c948d86b9a9b26dde6b1e6bc70ee3f21e681be8a8711a", "object_relation": "sha256", "Tag": [ { "name": "158-94-210-6", "colour": "#871697", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012808, "uuid": "b5c81bec-4379-4ba1-a01b-27a78f550567", "value": "T11F646D11B9C48432C673383107B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012808, "uuid": "204b3ae0-aa8b-4ec9-84b5-34695259d797", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012808, "uuid": "78345684-ed79-40af-b174-b039b9989161", "value": "6144:dmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFti99V:Y1iw7gryNkSV1hy1Z1u2JLI97", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777012808, "uuid": "c5ada7bf-e01c-446e-918d-acecf7c70939", "value": 312536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012808, "uuid": "f288eae6-2111-4f8b-90ec-8b133bd55702", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6fbc6d74-3fa8-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1777012808, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777012808, "uuid": "61c9b250-6f5e-4cbd-b26c-62c149d927aa", "comment": "Malware payload (ConnectWise)", "value": "bd6bb3c5ad7547d57cbaed4ad004c7c4", "object_relation": "md5", "Tag": [ { "name": "178-16-54-33", "colour": "#ba1824", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777012808, "uuid": "aac4119e-0a6a-4a01-9657-fcca5f45a67e", "comment": "Malware payload (ConnectWise)", "value": "91fef94dbf74512b294628c8585a0dabf6b5558ddf3def57fa7dd60e573a9052", "object_relation": "sha256", "Tag": [ { "name": "178-16-54-33", "colour": "#ba1824", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012808, "uuid": "ec341b87-420d-4b16-a0b5-e667988defb7", "value": "T1BB836C43B5D18876E9720E3118B1D9B45A3F7E110E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012808, "uuid": "eb6cbecd-e88d-4e7b-8997-f2719140af3b", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012808, "uuid": "51fb96fe-654d-435f-8902-9f2bc472dab6", "value": "1536:6xoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYT77JrA2:IenkyfPAwiMq0RqRfbaWZJYYTxrA2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777012808, "uuid": "e0c78233-edc2-4bbd-a616-9097e6a4a9b9", "value": 83184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012808, "uuid": "49e0087b-aab4-448f-9b93-6000c1e37816", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d9acac7e-3fa8-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1777012986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777012986, "uuid": "9f6f43f0-e6f4-4a46-8c33-8d8de432ece9", "comment": "Malware payload (ConnectWise)", "value": "c1c3a826386ce88a33b43189e45fe492", "object_relation": "md5", "Tag": [ { "name": "91-92-243-181", "colour": "#043a69", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777012986, "uuid": "3b156d89-b7e7-427a-bc2c-a9f1af93acb9", "comment": "Malware payload (ConnectWise)", "value": "25e1cebb91e9a6c351d04509ebde9e0caedca43c2031d3e2e4591224982234da", "object_relation": "sha256", "Tag": [ { "name": "91-92-243-181", "colour": "#043a69", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012986, "uuid": "e3a06c3f-b39d-43a2-bec7-07e005aab649", "value": "T102836C43B5D188B5E9720E3118B1D9B4593F7E210E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012986, "uuid": "05ac4ae8-dc69-4f87-a580-be63d46d1fa5", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012986, "uuid": "f3aaa069-b99e-4823-890c-44e3a7739bd6", "value": "1536:CxoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYj70JV:genkyfPAwiMq0RqRfbaWZJYYjwV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777012986, "uuid": "cdfa865f-85cc-475b-a374-7a4c1653a5d5", "value": 83160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012986, "uuid": "290f9109-1c19-4899-8074-5dc26284904c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3737d647-3fb0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777016149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777016149, "uuid": "fad32de8-4920-4ef9-aa14-3d56e41f3e51", "comment": "Malware payload (Mirai)", "value": "0ca2a40e9c0fa7f9d51f252bd4c43003", "object_relation": "md5", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777016149, "uuid": "68dc1997-6f7e-4c25-9e90-26bf9ddb1b8d", "comment": "Malware payload (Mirai)", "value": "1608f9c477cd52dd4f36eb9af46cb65d7a719019d7ff60e858446c397cc75bde", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777016149, "uuid": "08877930-eb72-4f60-904a-25125a577003", "value": "T14A632B46FB03CBB3D84315F201A7AA6A4A31FE3A4C22CD86F3647DA4EB325C166157", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777016149, "uuid": "a75bcd1b-e5a6-47b8-b217-910052b81642", "value": "1536:CmiNIYiApIWrvA/AHWzG/7lAQMKp954P/VBRbq3PmwdgIV:5YixWr+dCZAQMKpv4nVBRbqjK0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777016149, "uuid": "e9a857fb-b77a-48a7-bb0c-dcf45c881270", "value": 70208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777016149, "uuid": "010c90ed-79ba-494f-a3ab-21e582bc3a16", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c58556d-3fbc-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777021446, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777021446, "uuid": "1adf58ee-6549-410d-9292-a86badaeae37", "comment": "Malware payload", "value": "d1d2d8b8ddacfd6760f0bbcf596b21b0", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777021446, "uuid": "7c326b4c-99f5-462c-84e2-a2fa3d6abb13", "comment": "Malware payload", "value": "7a04c8b8e28afa7c6538e095faa768a8130947fac719cfda4da440be8a856220", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777021446, "uuid": "fd6684ec-b638-4f5b-ba5a-ac335b11660c", "value": "T1051211E198E43876828391D27916B319AFE9D207CB1E1A6073FC579D8FD2F85DA630", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777021446, "uuid": "9c6e084c-7fec-4476-a142-570eebc20874", "value": "96:RSrSqVrDt2+1oBaD28qoszlIm37BJQ6NUHIsIscj1jIlX/tu2VD2u0jVBB1qN+:RSrTyaLsv3kRHIszPh0JP1qc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777021446, "uuid": "2eeafc07-4937-41d9-84af-af174ebf6bfc", "value": 9491, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777021446, "uuid": "8f3dc66f-927d-4741-a89b-311fab2487a9", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3583869e-3fc0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777023018, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777023018, "uuid": "56649b10-b603-4f4d-a932-76e6fd561dbd", "comment": "Malware payload (Mirai)", "value": "53ef79f8d39e860d9102a69541bc5fa9", "object_relation": "md5", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777023018, "uuid": "7c9f4422-bb55-4f83-b12f-45259a2a9e7d", "comment": "Malware payload (Mirai)", "value": "092fa4059dd7a8ffa28111f98f98f067d95f038ee5e461e1a8ecf3bc9345a4ea", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777023018, "uuid": "d3a5eead-b9e9-4395-a263-40654dd168fb", "value": "T1A15171C7216801383CB5D61AB1B6E0CDB4A0405A7DFE1F8A7CEE6CA951EFE056C40F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777023018, "uuid": "1b9fb8bb-c13b-4dd3-8103-63f3e054cb65", "value": "48:vFTo0MsF+v9lMsFsQsFabMsFNQNFLbMsFI9ZMsF0JBMsFGawIMsF7wsMsFsh5Msb:vFToDsF+v9msFpaZsFSDMsFI9qsF0JC1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777023018, "uuid": "36d5c465-4149-4bcd-8843-fdad6bff78e1", "value": 2895, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777023018, "uuid": "8f3afc47-5e4a-4287-8a25-0567192efe51", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "606f9442-3fc3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1777024379, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024379, "uuid": "64b3bb94-6d4a-4fff-8c8d-28df23190092", "comment": "Malware payload (Gafgyt)", "value": "6aab1daa89d7868a4f5eb5e0c66598cd", "object_relation": "md5", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024379, "uuid": "0621cb54-7601-48ab-bb7e-d959d3f3db02", "comment": "Malware payload (Gafgyt)", "value": "cdca813e68da420c7aae63fc7a31f926413c8d24e42c0add78795e339509a3f0", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024379, "uuid": "03d86ef7-60ce-4c7a-8214-08fe3c177703", "value": "T1C4B31B49E9519B1AC6E231FEFB8D418E33131FACE3EA3115D9307BA023F5ADA0A755", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024379, "uuid": "12a8cd80-cb14-4435-9ae2-b6d4e4f7e5e7", "value": "3072:GBO64nHoaq5QotwxaZqb2MdgyMtsIiNfz:GYoaqGotwxaobYyMtsIkfz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777024379, "uuid": "2c6ca854-42d6-48ef-aaa0-914c7fdcc48b", "value": 110324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024379, "uuid": "ade96f9b-3e2f-4e46-b7a1-e08dc74f13b6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3642b38-3fc3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777024518, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024518, "uuid": "fcfa6332-3547-4653-9528-f1667bdc1e10", "comment": "Malware payload (Mirai)", "value": "96b4a49fa026bc91a5dd2e1fd2e47042", "object_relation": "md5", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024518, "uuid": "ab0ea8f2-334e-4635-821f-82c6eae0a24c", "comment": "Malware payload (Mirai)", "value": "2c203bf2914035458200a9300783e6a08d624693febf17650e8f8b6b39c18488", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024518, "uuid": "834e19f6-448d-422f-9575-babf4ed5338e", "value": "T1E5732987A9229FB7C006A4F065F54EB40B667D620E1B0AD97075FAE0437F4CEB50AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024518, "uuid": "dfdd50aa-36ce-4735-bb56-5389d85cae39", "value": "1536:EsCqT2P5qxWX1bKIqYotelzKp9AhBIC4o5:EsDdcX1eI0elGo7Iy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777024518, "uuid": "b6031e56-c230-4e45-a295-6e686825adcb", "value": 74748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024518, "uuid": "3ea7b26c-87de-4ae5-995e-42f3db0dc25b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3665e49-3fc3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777024518, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024518, "uuid": "ff36f25c-eb76-4701-8621-1fffa5db92a5", "comment": "Malware payload (Mirai)", "value": "8e38114b19c8f7abf9b261877201f069", "object_relation": "md5", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024518, "uuid": "f51d081d-f338-4465-b6ca-afb8badb1639", "comment": "Malware payload (Mirai)", "value": "28d9b4fbf99bea103bfa2aa0758f705347a5695ea4f722b783802c9e788a2a39", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024518, "uuid": "13301ea5-4248-4baa-ae2c-3f43d1785966", "value": "T11E3172C660D29875BEF5F52732A8890178C5A2C751CF7F4AAEEC39E584CED08B445B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024518, "uuid": "4829e170-a347-41cc-98a0-bcd53fa81b7e", "value": "48:1pipbKpqp+rpy5pn6pR/spupRIpWpn+rpGp5:1ENKE8A58TUwjII843", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777024518, "uuid": "c679f01a-2a3b-46e2-867c-93aea0478142", "value": 1713, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024518, "uuid": "d03b029a-8ca2-487b-aca4-69e927c8347a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4039ecf-3fc3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777024519, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024519, "uuid": "af958fc1-55a3-4c22-aa9a-f633ace5d70f", "comment": "Malware payload (Mirai)", "value": "4c21e2deb011894dc9efdf48d0b76c6f", "object_relation": "md5", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024519, "uuid": "8b6a5439-db73-485d-bb3d-215fc93c6396", "comment": "Malware payload (Mirai)", "value": "2f7d62f92942a794d1bbc33a6447d2665b98538a9c7a49a236b1d1dd2423cc28", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024519, "uuid": "ebe522f5-4502-4170-926b-5c9cd4efc149", "value": "T19A83084BAB1D0B47C0A76AF03E3727F4976EBEA111A445C0601AFEC143B29F17156F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024519, "uuid": "34739261-b897-4a0a-bb74-aed8c467ee6d", "value": "1536:0+iFdnIoUpmO802H3hyu767lAEhI953aNq37bAZEtv:PMZf6nI953qqN5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777024519, "uuid": "6c908c12-4cde-4b04-b184-f23c921f2a1d", "value": 84240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024519, "uuid": "6c2c13e9-6de0-4f4d-87bf-54a84ce73884", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b409b245-3fc3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1777024519, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024519, "uuid": "ed2ca1ef-0ecd-4368-aa70-8e821c6202d4", "comment": "Malware payload (Gafgyt)", "value": "2142fba0633d568c7bfc44cf99c83783", "object_relation": "md5", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024519, "uuid": "01b8344a-b0b4-436a-957d-111ee9700b2d", "comment": "Malware payload (Gafgyt)", "value": "e141465a9a44bd03a86e594d80609921771a1f12bcc656e97b39d5bd01c63a56", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024519, "uuid": "2420491f-9bc5-4040-b462-96888f447d65", "value": "T117830884FD059B1BC6D371FBFB99028C762A1FA8E7EA311699317FA023F65D1153A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024519, "uuid": "45349027-b907-44c5-b1e4-ee2049f05a1b", "value": "1536:mm9gSD1tfICMfd2FJhTOvaiDHHFKqVSbzuouL:h5ICM4JUgq+fuL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777024519, "uuid": "d22844c0-b7bb-4032-b06f-69c10713afbd", "value": 82592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024519, "uuid": "f68d8b8d-e50a-4eba-9707-824707dbbfe4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4091dcb-3fc3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777024519, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024519, "uuid": "c294d4a8-6330-4305-88d7-fa5532502294", "comment": "Malware payload (Mirai)", "value": "076bbd5265ebfa221605c3c7456994e1", "object_relation": "md5", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024519, "uuid": "851140b9-6e29-4721-a274-988c0ea7ab1a", "comment": "Malware payload (Mirai)", "value": "9bfe534e6df528c366b30b62cfffc2b13fe9ceb6a7e49418d58585b4463ca6da", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024519, "uuid": "e5ea30ba-3feb-4773-bac5-eefbebf05564", "value": "T1B793F693FD01EF77F40BA37A449308157230BFA60E921AB2B21779AADD361D41467F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024519, "uuid": "e5fe057e-c72e-4dc0-8132-e126376eec83", "value": "1536:JS1+fYWid0E8FQvQGiEyuEyEvUuPIcmvUT7w9p2b5YnsXBgZ:JS1rWid0UQfEyuEyEzI1c3dYsXuZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777024519, "uuid": "a301f45d-0014-495e-925d-405e296567df", "value": 89648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024519, "uuid": "bddfa0b1-4dc3-452f-834c-381e650d0e73", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d7dd328f-3fc3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777024579, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024579, "uuid": "56f9bb3d-d635-4009-a9f8-49c06690c0d0", "comment": "Malware payload (Mirai)", "value": "ae62b761eab286b75c058d7f0bef1f70", "object_relation": "md5", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024579, "uuid": "73f1f081-f162-4272-abb5-0bf6ad17f994", "comment": "Malware payload (Mirai)", "value": "41ae9c9293e3fa20bb467cd3e0551837101ec592f84a12bb3a649dbb79cf7638", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024579, "uuid": "1b905d89-79a6-4938-bcad-f0e5e210598a", "value": "T11CC3632A7E11AFBFE178823007F75E70D7592ED626E18284E26CF7085E7128D185F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024579, "uuid": "0a9d2a80-b9e1-4711-bb92-e1293d0aa89b", "value": "3072:Xe2mYO7knJ2Qy2qzbyW9Y9klr3z1xzFqCmff:O2gRhtHYf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777024579, "uuid": "e1b2a89f-e43d-4df8-bd47-9019e4faed57", "value": 122096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024579, "uuid": "eea8a32d-4b6b-47fd-a92a-67d3be0ac9e1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d7dda207-3fc3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777024579, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024579, "uuid": "930a61e6-167a-42d6-aee1-0ccf2e600d98", "comment": "Malware payload (Mirai)", "value": "f9fad8ab5d019903d345e8eb57616767", "object_relation": "md5", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024579, "uuid": "cbc357b9-14ef-4331-b56c-96fa5e3e77ab", "comment": "Malware payload (Mirai)", "value": "bf0df86359d4d81f8e6c752b52824748b5ac223fd6ce5e28891f703cc946e432", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024579, "uuid": "7585e9e0-524b-4823-8a3f-343648bf06ae", "value": "T155632A42BB42DE73D04310F112F79B664931FE7B2866D686E364BDB5DA350C0A612B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024579, "uuid": "85bcedf3-d3e2-421f-9529-629fe24d583e", "value": "1536:FHusEacKPTxmOb6sMu9QkwN0vd6b1OlfrrB1/+qqFIwNg:VusEarTxt6u9HqodrvW16", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777024579, "uuid": "b2fd0043-4810-4441-8f4c-b9c0eaa653ba", "value": 66912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024579, "uuid": "7275dd47-7f37-4611-922f-ceebf0ab90ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f63f99c9-3fc3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777024630, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024630, "uuid": "88dcebe9-a76f-43a5-b79f-4657ac3ca4ed", "comment": "Malware payload", "value": "17f74444692e96863927ccf03352f3d8", "object_relation": "md5", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024630, "uuid": "a9fd1f68-e334-4b52-93fb-4bc88794b9c8", "comment": "Malware payload", "value": "ff7474ff07efbd71ab36c11f337747e520bbfcac30bcdf4603a78a69b3b827d7", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024630, "uuid": "cb8c05ed-f04f-4ad7-a9ff-34616f38af75", "value": "T1F4C39516AB519FB7C81FCD7305A94A0120CCAD5A12D92B6FB2B0FA5CE36B94F09D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024630, "uuid": "307c827b-816f-4258-bf95-af7ff9cd48af", "value": "1536:gEmeT8hSTVuVT/yvNp8xiC7yDHh1SqGZ+01t/8NBpKRuBCjLDKR0h:gEiSYP74hdGg7pE3jSR0h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777024630, "uuid": "3741dda6-b8b4-46bf-9610-84598cd72955", "value": 122096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024630, "uuid": "f3eae22b-5616-4803-9746-24ecfb9471d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f643ac8d-3fc3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777024630, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024630, "uuid": "8bf0f872-e2a8-43eb-899c-4c7aa947009a", "comment": "Malware payload (Mirai)", "value": "deefa4c14f3b3dc5f210cc57c0de3fa9", "object_relation": "md5", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024630, "uuid": "eb612ab6-c0c3-43a8-9405-278875e5613d", "comment": "Malware payload (Mirai)", "value": "c876cffb991d5916bf5fd3bc4991dabf3e7ee776481f77bfc11bb3d20cf92ada", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024630, "uuid": "7453415f-1683-4e04-ac4d-84390d0b2d30", "value": "T196734B276691C53FC05BD1F01BEB9522E862BC7E0E32704973E1FE916F3A8C06A5A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024630, "uuid": "7adc98fb-de6e-47f8-b01a-71684a26cb90", "value": "1536:Unir1igF371f0Bpxy8BlYXDRD//zuxhTB2UhBer63tQBu:wirjp2pbBlWRD//8hTB2yeyi0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777024630, "uuid": "57ef6635-05e6-4d50-996c-c11ef8906436", "value": 75992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024630, "uuid": "fd41f09e-55f5-4a09-b82a-ebab023c4450", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fdef58de-3fc3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1777024643, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024643, "uuid": "7c1cf528-878d-47f0-b990-879935bfc5a0", "comment": "Malware payload (Gafgyt)", "value": "64e8a4d69c3662f062a30cd55faab57a", "object_relation": "md5", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024643, "uuid": "27aeac72-a1ec-4604-91c3-c22736e41b20", "comment": "Malware payload (Gafgyt)", "value": "f4fa39763da0dd7a2b6f2033442fb586557ea23451b797ab5cf9699e2ae4b6f1", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024643, "uuid": "acc4c35d-196b-4bc5-a2ae-ee98913e7883", "value": "T147931A49E9519B1AC2D231FAFB8D518E33131FF8E3DA31269930BFA023F16E609355", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024643, "uuid": "e0b7fede-50e1-432a-afdf-162413bfc605", "value": "1536:QwnztuVvCr8aG1jaauyJiC6xhk9mpki2atEbxVy25U5bYRMZG+:q+lG1jaauodQtE7yAUBps+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777024643, "uuid": "37e716bc-382b-4aeb-9b01-9314649735fa", "value": 95264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024643, "uuid": "884af70e-bd9a-4fe8-ac92-903f6851f463", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fdf93b87-3fc3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1777024643, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024643, "uuid": "42cdedeb-00dc-4e0e-a101-91ba145f19c6", "comment": "Malware payload (Gafgyt)", "value": "9fdbfacb6ccccf61a2943eae3b46af07", "object_relation": "md5", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024643, "uuid": "98614880-7f37-4cd2-8780-72f5f1b0868d", "comment": "Malware payload (Gafgyt)", "value": "9ad3b2928edfa615d0d19220dfc52c0a176f8d2f55ba3fe129879325840da4d4", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024643, "uuid": "3c86294e-0be9-42bd-86c9-ed3915db15f4", "value": "T14583F884FD059B2BC7D371FBFB99028D362A1FA8D7EA311699317EA023F66D115391", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024643, "uuid": "9cee36aa-1209-4435-b2db-1305273364e7", "value": "1536:ObuGXwMu21tya+MY7/BlhTOf132HHR9Hf/ZX7vWoWL:9M/Ea+MQlrR9/hrDWL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777024643, "uuid": "51614b7b-a0e1-43cb-ac7f-1d7bdb90eed7", "value": 84192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024643, "uuid": "aa9d1e59-9851-45e0-8498-c036354206a7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1926ea84-3fc4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777024689, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024689, "uuid": "b4ec25a3-24a7-4450-921e-a2b676b51683", "comment": "Malware payload (Mirai)", "value": "2e71134ce7911cf391abbc20f1a65199", "object_relation": "md5", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024689, "uuid": "a0d4f193-0eb1-4c8e-b3c9-ff240930e081", "comment": "Malware payload (Mirai)", "value": "4c5979118963c5f00fee20087e7ea65f7a07234f6befd17a39b943aa5d294f61", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024689, "uuid": "dd3fc18f-a1f0-40bd-aa00-cea1c5f9e8cf", "value": "T10893D62B7B130E23C0DA10B552F30231F5B9EF5938B84697B8A07D9D5F3AA8431567", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024689, "uuid": "522e2107-5f80-42fe-b3cf-6e42f16fb891", "value": "768:rOIW6Z1CdCsBCJvoY6Tr5NbO5I7BTAiGeshU2lnWEa7tvARkO+N95VSEX1tVml2K:BW6S4Obs7x1WEctYUN95ktr3is7R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777024689, "uuid": "58abd7d6-2201-4c70-9755-f6bc8691781d", "value": 94720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024689, "uuid": "5cd03f2e-c6cc-4bae-9141-4a7bb0ca20c6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d217b589-3fc4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777024999, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024999, "uuid": "87d4aa03-9f2a-4f92-9322-dc8dc570c0c3", "comment": "Malware payload (Mirai)", "value": "dd4bc576d2ca06bf040821a8dcf302e0", "object_relation": "md5", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024999, "uuid": "480b4a97-ac35-4796-8062-a81d6338bdbd", "comment": "Malware payload (Mirai)", "value": "c4c8c0b66c6f319a8aae8ce8fa41a9248a34a2580eda083546b06b410b3f6e28", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024999, "uuid": "62c8c5ae-cbd2-4730-a8c6-31addaa9049f", "value": "T10504881D6E228F7EF668873147B74E25976C23DA27E1D640D2ACC1106E6029E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024999, "uuid": "6ca64bb5-cb2d-4e2f-9a53-996e494214ba", "value": "3072:vg57xt7LHZwbq1ESBa3VCvrCsWrFesC5X:vglxt7LHZgh6C9FHC5X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777024999, "uuid": "cd2773ce-af00-4f50-a152-b3de94783118", "value": 173888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024999, "uuid": "26514ce4-1c2f-4b2d-ad10-1f26dbdfeccb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d21fd739-3fc4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777024999, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024999, "uuid": "a35ac67b-96d0-45dc-acc4-f489d9c4fda7", "comment": "Malware payload (Mirai)", "value": "ef44da0f8b8324d50c90729909036c50", "object_relation": "md5", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024999, "uuid": "6c1b1023-acf6-4025-ad7f-2b1d1ffd8258", "comment": "Malware payload (Mirai)", "value": "4800c6592215dd9fe08897807608e5f43e1974df939a736ac84aa49f5cc9c55c", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024999, "uuid": "c10ea15a-dca7-4533-8eb8-94f394ca2e07", "value": "T1BCB35BB3DC26AF98C655D074B0B08FB92F53A59482471FBE19B6C2B44443D8DFA05B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024999, "uuid": "8f4157a7-9b54-4877-9954-e60215c20784", "value": "1536:OTW/VCxsHZus32Li62C8r2KjR5fPPVWABouWcD0W+T507w:OytCxs3x62N1jzVWBuWs0b+M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777024999, "uuid": "6bfb7ea4-8f0e-459a-bc24-54f8420601dc", "value": 117568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024999, "uuid": "17a29b8a-2d59-405f-a1a9-9281e328f099", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d21fa643-3fc4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777024999, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024999, "uuid": "9930ef66-2e35-4a88-b44c-d86fc4a5bb3f", "comment": "Malware payload (Mirai)", "value": "aeda8a10a23b428daa0c7d9aada0555f", "object_relation": "md5", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024999, "uuid": "d3b22d4e-d58e-4316-93d7-f94172786252", "comment": "Malware payload (Mirai)", "value": "0f818c18e2da8575cd50046b12f51252a885979726703d73faa950ef510ab3f7", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024999, "uuid": "4ce53a8f-bf24-4526-81f9-a59963b1f17e", "value": "T141D35C17B5C180FDC4DAC1744F9BF53AED32B1A91238B26B27D4AF222E49E205F1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024999, "uuid": "2bf15d22-5328-46c5-ae02-1e3d1ce04df4", "value": "3072:79eSuygEPjt6qkWq2dhmDnYMb0oBd/gQyVGsdqml69aj:79eSuygEPjt6qkWqs2H2la9a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777024999, "uuid": "3310e1d6-3433-4dab-943d-f7f86b672a97", "value": 139800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024999, "uuid": "7d334947-3f33-4a55-9708-40bf9dec32ce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2266538-3fc4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777024999, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024999, "uuid": "17f35089-924e-462a-b7cf-afa282418479", "comment": "Malware payload (Mirai)", "value": "0cc43b82287ef80e6d8f640382915b94", "object_relation": "md5", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024999, "uuid": "b2690247-711e-4950-88ad-97e04f20ce3e", "comment": "Malware payload (Mirai)", "value": "1f034da4196be6b6bf55b26af1be078dcf649b508b02d959796f16426ccfb7dd", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024999, "uuid": "5bf19dcf-ef6b-4bfb-8eba-df4db0788188", "value": "T1EC04B719AB510FBBDCAFDD3702E90B0139CC955B22A93B363674D528F54E50B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024999, "uuid": "fa797e56-470a-4e95-b041-3fcdbef9f65b", "value": "1536:HwdqBezGeDBxeXJvkgBZOofcQq6K7yKshdUNmBvLZvU1SaZ6y985gkgXw5jxgK2e:HKpzG4e9kSfcQqW9v8SawFgXojl5vFt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777024999, "uuid": "6216b098-dada-49ef-b29d-1b18b3035c94", "value": 177760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024999, "uuid": "850eab6a-adb0-4c03-9658-210ee712172d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d226ffcd-3fc4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777024999, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024999, "uuid": "af1655d1-ecd8-470a-a27d-3df860b416b6", "comment": "Malware payload (Mirai)", "value": "30e8adfcc0ca44c5369ff49bb52fe348", "object_relation": "md5", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024999, "uuid": "41dcc305-a8dc-4505-864b-2a6058c583fe", "comment": "Malware payload (Mirai)", "value": "0b8c2e794d1dce61898960a8e877d94738474e56e0a6cd2efb33e8492c0c2125", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024999, "uuid": "e457ab12-f697-4453-a497-5857512de04b", "value": "T1B0E30B46F8814B12D5D111BAFE1E128E37131BB8E2DF73029D246F647B8A97B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024999, "uuid": "c02ad177-1275-41ec-9347-949f2921c28a", "value": "3072:jHea4CjNYUDAgp4X8rL0z4aTlwSdzVMAa3LP:TePCjNYQL4XOL0MamIMAa3LP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777024999, "uuid": "9de4f229-9aa1-4a8b-b37e-74a3e242d090", "value": 144156, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024999, "uuid": "0b2a4f12-a6cb-46d4-b4f2-631cfb5fdb11", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2296f6d-3fc4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777024999, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024999, "uuid": "82bdffe5-b49f-4600-a8e7-5be28707a889", "comment": "Malware payload (Mirai)", "value": "b6ce603583efb6a6bff52703cd1d7822", "object_relation": "md5", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024999, "uuid": "d8b51267-f7e0-489f-9be8-bdf4c8a6ac60", "comment": "Malware payload (Mirai)", "value": "98472a2a4427ed6da817b62f9aa1c63e3b4be228a3a28b468d177002c2f34eb5", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024999, "uuid": "f7e5df01-ffcf-456a-a5dc-4462672d0a82", "value": "T153042945EA404B13C0D627B9F6DF42453333AB9497EB73069528AFB43F8679E4F22A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024999, "uuid": "193ac577-2143-443f-b80a-001e26dc8984", "value": "3072:O7eKvx3cg9/epneFaceTORefjHYlYLaU38YhTfYo+M/Rz4G5CLn:ueKvxT9/ueFaceTOReLLLaU38+x+M/RQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777024999, "uuid": "5978d819-544e-4ae8-919c-4fcf4498ed96", "value": 181490, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024999, "uuid": "2d0ff2b5-3cf8-4b50-8b41-68e755ebab44", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d22a2340-3fc4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777024999, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024999, "uuid": "3e56dd02-fe23-488e-b68f-8c6a1c8ccd77", "comment": "Malware payload (Mirai)", "value": "a399b900de4dd06be514de800af86b5a", "object_relation": "md5", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024999, "uuid": "313f4b88-d85b-455d-a0d7-082aae0206ae", "comment": "Malware payload (Mirai)", "value": "8458d642615c21e07b61b63a09000e34981eb634ea3f4359f717c5619154b3fd", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024999, "uuid": "55d35188-eb95-4041-ae98-98c870552863", "value": "T169D32A06730C0A47D1632EB03A3F67E197AF9AC121E4FA40355FAB8A95B1E335586D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024999, "uuid": "cfda297f-dec2-4435-98d5-6102260c2436", "value": "1536:NroGHNTUZN5QIBUiCxfytWtew8zGXavwoo7lrkJvAhh3rp+puQfqwDn7tN:XmJUiCxdt67wp7l7hreJN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777024999, "uuid": "f6072df4-4302-48e0-b1b7-17a3ddde4746", "value": 134036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024999, "uuid": "4b6d7e49-1173-4772-b35d-89f17d5d400b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d22c75a1-3fc4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777024999, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024999, "uuid": "f9d8c86f-7add-47a8-924f-d88e3efcb7f2", "comment": "Malware payload (Mirai)", "value": "a10080269a0f1072aa901c4fff8db2ad", "object_relation": "md5", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024999, "uuid": "17c5af54-3586-4644-b80e-93b01ac11fb2", "comment": "Malware payload (Mirai)", "value": "fa5aa20953233a8b28de6e9e35c17f035a40d517939a83a8cd3e5b8f21052a90", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024999, "uuid": "b8ef54e0-cd82-4d57-8847-30cbb581d6ca", "value": "T1D6E32BC7F900DEFAF80AE33648530905B630BBE115925B372257797BED3A1991873E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024999, "uuid": "a654c02e-7529-4397-862c-33071d52c19c", "value": "3072:IXIrpVCNs5jgpC+CdjYQ9ODVvjbidLj6Q2y8opM+:IXcjgpC/dX9OQLgy8WM+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777024999, "uuid": "0d670a0a-8c7b-4f97-bee7-84f28ee51370", "value": 150496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024999, "uuid": "1441ed52-974f-46f2-a1e5-3b7cbca2d40f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d22ef33e-3fc4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777024999, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024999, "uuid": "4ee0c241-3272-4c2b-9f9a-76c9aebb1162", "comment": "Malware payload (Mirai)", "value": "d5d17633ce57e0a1ce828dd2a00f02eb", "object_relation": "md5", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024999, "uuid": "d0fe1488-4803-4ce5-bdd0-8714c19b40be", "comment": "Malware payload (Mirai)", "value": "ecd8d9fd5f0635e3ae4aa16f3a2bd682f5ccb1345084f9beea57c164f39e85d0", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024999, "uuid": "37efe04c-5b23-45f8-8a9b-e65ed4d897a6", "value": "T12F937CC4F243D4F2F84305B1507BE7365B32F1B9201AEA43D36A9A72DC91951DB1AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024999, "uuid": "4a55de9d-0778-4b78-a718-39a6f8c36201", "value": "1536:rsQ5ZHxZdGtH3C5JEhL5PuW7ezbdNoqKoA/lLSXLem:rR5ZHXdGB3IJEhL5PV7MdiqfUG6m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777024999, "uuid": "a60042ce-6361-49a1-823a-882d755391f9", "value": 90024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024999, "uuid": "a2c31426-7b33-4f93-89ac-e3ecb9fe2836", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5477a85-3fc4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777025004, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025004, "uuid": "85aea1fd-bc25-44fb-9a86-5b4c433c6001", "comment": "Malware payload (Mirai)", "value": "c2b7b6d354c1665ee4368da66a3a4800", "object_relation": "md5", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025004, "uuid": "e5993611-6fbb-46de-ae43-f57d467e3916", "comment": "Malware payload (Mirai)", "value": "1d39950fd081dd9e7fc2090bfc1c9d6d97d544f29147bdb7025bafedad56b5ac", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025004, "uuid": "b9f788ea-537f-4292-9b8d-bd104aa7519e", "value": "T155C31B45FC405B23C6C612BBFB5E428D3B2A17E9D3EE720399255F60378685B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025004, "uuid": "575a4ee0-fdf8-4cc7-a678-e9690645223c", "value": "1536:pfKa0rG5yC/cMChygtcOBdWFAcJX4VlgXTAnoF0DUmZru451WhbVVlXWwywEReQt:5KaprMh7yOXWFh4UXsoF0DJZRvW9HWM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777025004, "uuid": "a8d49013-c613-4565-89c4-e0a7bb226adc", "value": 129824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025004, "uuid": "2478527f-5bd4-44c7-8aa9-e835b2d363b3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f6f79b0b-3fc4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777025061, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025061, "uuid": "f518e70f-1815-478a-9e00-9a18c7a8737c", "comment": "Malware payload (Mirai)", "value": "ff0cfcf2bee247b66fa53b1b5d02d6d1", "object_relation": "md5", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025061, "uuid": "1b5042f1-5e8c-4d50-a603-817d0aca3f9f", "comment": "Malware payload (Mirai)", "value": "3ed5c0dad5c55dcb78e6b41e6d62489e2c3991f9901d1bf0ee63e969f99a98ad", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025061, "uuid": "843f7fb3-4a76-4436-9a3a-2ef716c62d57", "value": "T19FD30945F8504B23C6C611BBFB5E428D3B2A17E8D3EF720399256F60378696B0E3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025061, "uuid": "7b30e662-a0ad-4847-8ab1-af5607f7dfeb", "value": "1536:IKdzElm18uZJNb4A7Fa8eAZHk4VB7fzTT7rFjg4SvDeeqZPt2Ulqawyw6RNPITip:IKp50EU8e947LLrFjzSSthtg61KM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777025061, "uuid": "f009fc67-df83-49e5-a50f-105475f1cdf4", "value": 133920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025061, "uuid": "6463b8c0-c619-427c-9c0e-2e4115a1f934", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6964a02-3fc5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1777025409, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025409, "uuid": "8334027b-2147-4b76-a8e5-e035a0b6e457", "comment": "Malware payload (Gafgyt)", "value": "17eb9a7e788042f71e1634e7de95a7c5", "object_relation": "md5", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025409, "uuid": "66e58cb3-af86-49da-b617-8b80babecd78", "comment": "Malware payload (Gafgyt)", "value": "4cf6605327711bb67d8784ede8398ce64802089898a562e639d48e28369310bc", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025409, "uuid": "f158d883-0d94-4601-9e9c-8a9983da4ef5", "value": "T167343B45EA418A13C4D117BAF5AF418A3332A795D3DF730699286FB43B877AF0D636", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025409, "uuid": "fa42ab14-1f7b-49c9-a1b1-3e78845b36dc", "value": "6144:sQYf71sTafH/a7KKck/l9InplzF6f9ihM/9eAU:sjxEiH/a7KKcktOpDPG/wJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777025409, "uuid": "ef0d9539-322e-4a6e-939c-7de40a9bb9c9", "value": 230968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025409, "uuid": "09f0ce2b-6419-476f-9317-5ad9955ba8d6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6974b70-3fc5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777025409, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025409, "uuid": "59d68a86-e0f9-4477-b9a3-76090cebe934", "comment": "Malware payload (Mirai)", "value": "01fb2ec83b60cd32d657c1446c776eaf", "object_relation": "md5", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025409, "uuid": "8c02984c-a077-4099-ae84-33f042f617df", "comment": "Malware payload (Mirai)", "value": "4a207f94d7e4aa9dde9f11a020fb65cc2d67562921d6c2b8caeb1f172d36da6f", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025409, "uuid": "4aff671c-6eab-4b1e-a818-76d637237330", "value": "T12FD35C0673180E17D5A349B02A3F1BE083FED5D021F4BA89691F9B6A8676D3B1485F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025409, "uuid": "0a5fcd4c-dff0-451b-8e11-a4cb3d8fe3bb", "value": "3072:CV0zui1ZhMHJ6A+qrxfbOUm3+Q2Mc9Fkbn:LP1YO8dbOUmuQ2Mc3kbn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777025409, "uuid": "37820c5a-5d83-4079-848e-c00671461e62", "value": 134336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025409, "uuid": "609cba51-77b5-4a91-a527-b0d895e3ff6b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6a1f905-3fc5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777025409, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025409, "uuid": "0bc9eddf-1aaf-4414-ae27-f92ba4d10f2f", "comment": "Malware payload (Mirai)", "value": "1014baee9a9e790f732c3a95f36700eb", "object_relation": "md5", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025409, "uuid": "1dcdc8eb-9ca1-4e6e-8894-fbfa60957f55", "comment": "Malware payload (Mirai)", "value": "89486e00bd1a44ff5e38255105b907a0c3e698fb4b10deea9ecb9b23c28f0512", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025409, "uuid": "27893771-43f5-450c-a38b-07342f000ca5", "value": "T137E34A55B8828A22C9D513BEF92D018E331327A8E2DF7213DD205F2577C7A6B0D77A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025409, "uuid": "c415d54b-dd04-43d0-8eec-eb0dcdc98b13", "value": "3072:ENUkePbhroLLyLbPDADuOu1sya89LjPEKe2+IOkp:weRoLLynPD2u6yawpe2Akp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777025409, "uuid": "a7ce6070-0f1d-4312-a816-105dad258d74", "value": 145544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025409, "uuid": "ea688320-9a7f-4ea0-acd7-07fc13bad246", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cccc849c-3fc5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777025420, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025420, "uuid": "232b6050-a564-4655-8b48-aa84f36dc5bf", "comment": "Malware payload (Mirai)", "value": "4a18fbcf1f12923ea0de67b5c686420f", "object_relation": "md5", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025420, "uuid": "05f06f3e-74ea-45f6-badb-1ca80ea555c8", "comment": "Malware payload (Mirai)", "value": "e8448e71d83c588d0c24035e96dc3582b4b5838f1d3195e363dd59f00fa02e88", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025420, "uuid": "11640ece-6a4d-4ffb-bc75-9655d2d1c202", "value": "T15D93D551BC82562BC5E423BAB6BE668D336577E5C2CF722BC8214B117B8551F0C63F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025420, "uuid": "5c81f000-487b-4a10-b5f6-08a219356bce", "value": "1536:Ud+d+6yn9H/NTzULgW4W2luLaN5q00brz9ikZcxew+7YY1:++dAn9eL6w0ecxetd1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777025420, "uuid": "097cfa17-20e1-4c90-8934-b20110245b2f", "value": 93800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025420, "uuid": "0f09a614-e0d2-4d6e-8a86-5f00101eb51b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ccd89d30-3fc5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1777025420, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025420, "uuid": "7b9565b9-996d-4bf8-b62a-b315337cf753", "comment": "Malware payload (Gafgyt)", "value": "c141f288ce2db443cba5a6150859b6bb", "object_relation": "md5", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025420, "uuid": "72f2b451-5386-4ac0-9e03-bd7b873c77b9", "comment": "Malware payload (Gafgyt)", "value": "6d9217bb4ab9157b76d3a21b4dea2210197df82081202026e687034454dc6244", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025420, "uuid": "fafaae81-8083-4881-877f-42f0aa9452f6", "value": "T12CC092AA72A340CF8B64CE0CF856CCC9604780DD65A4AB6CD1A43E2E55E993868172", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025420, "uuid": "c3113f06-a35b-47f4-a030-1030ffe6e5c5", "value": "3:GRFiGuLWisi/vaGN3zOdV3LKiovGQJwGuLWisi/vaGN3zOdV3LKiovn:SiDWFsSaKLKiovpwDWFsSaKLKiovn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777025420, "uuid": "9b981477-c70e-4328-8fdc-f3c9c7a4d489", "value": 130, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025420, "uuid": "a549b95d-98ce-43db-87b0-8898a27d1922", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ccd93aba-3fc5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777025420, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025420, "uuid": "bef9cdd2-e327-4f3d-8b0f-84fb874cab23", "comment": "Malware payload (Mirai)", "value": "a202f234ec8ec2a063f7fe95755e1b64", "object_relation": "md5", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025420, "uuid": "b85894fb-197b-4ef8-ad10-e0541ab7bce8", "comment": "Malware payload (Mirai)", "value": "560b364ae9923dc12fa14849658fe977ac34dcfdce3ddb9fd0bb07f277bd9fad", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025420, "uuid": "f8df0245-1ae8-410c-985b-81b4aae245e5", "value": "T149F3C50E6E198F7CF79987344BB79E32965833872AE1C582E16CD7105E6024F641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025420, "uuid": "b9478d8e-68b2-4688-8c75-19dce2d27aac", "value": "3072:MOATXjpCgqDJHDexBJKfjPV4kuMu8hJBQX/uw9EfszRpSP/Q4vkTTzTT4BFZDiwY:MOATXjpCgqDJHDexBJKfjPV4kuMu8hJu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777025420, "uuid": "50cf3a5d-6ac5-4cb9-8a94-f15ffe9eda4f", "value": 171724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025420, "uuid": "e5e57ef6-d15f-4628-bb29-9c179417a179", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ccdc0bca-3fc5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1777025420, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025420, "uuid": "69866a34-dea1-45b4-98a3-4a51d27c9113", "comment": "Malware payload (Gafgyt)", "value": "b55adcb0867f5fd6fd39f24177ff34d3", "object_relation": "md5", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025420, "uuid": "4b084a2c-10ac-4ba5-bad7-e9c27e168088", "comment": "Malware payload (Gafgyt)", "value": "fb69d3892bf3ea8c5b2594540cfd31300c6170334934bbd983479c79fda01ddb", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025420, "uuid": "cb0799ec-cd6c-4e10-9441-96bb0f6f7e81", "value": "T157C39D32D8396DC4C1945434F8B1EE711FA2A5C441A25EBB1AE5C97900C7DA8FA0EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025420, "uuid": "8a294e19-f692-4c67-baa2-8413e0ea816e", "value": "1536:6aZwsA5XjVZJK0twtfXd/GW25UhMMJNu5xWKLYMYaXgDe6u8KSgnMwSMwm9rFHwj:6f5Z5Z98XdmVMJaWaXvbjSqSMrHQwEL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777025420, "uuid": "4d37f9a2-4cd8-4223-96f6-c3f1c3c52ac4", "value": 120332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025420, "uuid": "e1d1aa31-6125-48fb-93a5-90fc97ba88e5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ccde72d6-3fc5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777025420, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025420, "uuid": "9336df90-8f45-427a-b2ab-bc8c22691fb2", "comment": "Malware payload (Mirai)", "value": "7ecfef8940cd28b420838af7c0fb0578", "object_relation": "md5", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025420, "uuid": "2d586328-a068-455e-b0fb-1f8a8216a91d", "comment": "Malware payload (Mirai)", "value": "f32ef1ba5591ed8c23823a7bfe4b69d21a650111d46dabeea9a5621e619cfc32", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025420, "uuid": "e9a7a92f-6caf-43c0-9f14-956ea8590719", "value": "T109041905BF110EFBD89BCC3B45F9270529CC581A62EA6B36B934C858B54B25F1AE3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025420, "uuid": "da186afc-ea74-4d03-a9ea-218430a95f3f", "value": "3072:t60NrtUpT/5dltGgXGGP9M4S8lrXwU2worKFLYV0fCtZ1SD39rsJzjM9fx49SY2U:t3nEr5dfHPq7UTo+FsvR9X0l6g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777025420, "uuid": "3ee68bd2-8a56-4246-8f4c-bfbb8e02e06a", "value": 179916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025420, "uuid": "30328319-3ef0-4b93-a756-31e88d7080e7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cce29546-3fc5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777025420, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025420, "uuid": "c504f401-06fc-4f3c-b021-dbb2ca9a3dfa", "comment": "Malware payload (Mirai)", "value": "04c0e2323594afab8d51b6a5fd2a5c1f", "object_relation": "md5", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025420, "uuid": "f7668735-d037-4db1-bd94-a96d85c73d90", "comment": "Malware payload (Mirai)", "value": "445fcda29838c653efc264ee6ed53f660db302687ae124c46b1548cb8d578612", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025420, "uuid": "49b51741-2496-4dba-a169-6a695892f42a", "value": "T1CBE34D9AF802DE7EFC0BE57E44670D15FA30A3613243172D529BFDA3AC321A65D16E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025420, "uuid": "2013f478-2e8b-4b92-ba50-9b9dd1bbad49", "value": "3072:luWypdcGShA/EmPA39TsZJ243nxl9XzrTmddp:gCGShAMnThAxl9Tmddp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777025420, "uuid": "b9f26a53-3524-45d1-94ce-fbcc531e5bc1", "value": 146888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025420, "uuid": "19e3048c-7f62-4d73-9fa5-b73bfd387c34", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "efea76cc-3fc5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777025479, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025479, "uuid": "31f905c4-a8dd-4f2f-a8ab-895f2852494c", "comment": "Malware payload (Mirai)", "value": "def8217d8b37e6ed0af3eb93c1556c29", "object_relation": "md5", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025479, "uuid": "b2f4c363-3945-4efb-8a4b-9572b70a6d46", "comment": "Malware payload (Mirai)", "value": "8f8173b6f784c599fbce0a0ca3c8bf45b7531dfc0b9db21a311e482e29ec7915", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025479, "uuid": "1503bb66-9c02-4dfb-bc5a-3dac2a921da4", "value": "T160D34A2275391E2BC4D0A87E22F74361F1F167DA25A8C90E7EB20D4FFF252206547A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025479, "uuid": "49c7705f-2a66-453a-bbcb-de15ac8e8f89", "value": "3072:lCldeCsOs9kzj2vV4XcZgqniE230IO1BlsT3jFA:APeCK9kzivVYQitymTTFA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777025479, "uuid": "47255aa4-40aa-4d30-be15-09761c5663c6", "value": 140776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025479, "uuid": "6bcab1d9-50f3-4074-b5c8-3c48bbc33147", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "effc6d95-3fc5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777025479, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025479, "uuid": "21cd1a71-1bfa-4eb0-8323-d78ccf9ab3f7", "comment": "Malware payload (Mirai)", "value": "a109801554637905fb6c8efd788cf9d5", "object_relation": "md5", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025479, "uuid": "16848949-ece3-4ba9-bd47-2ee8dc0e3b4d", "comment": "Malware payload (Mirai)", "value": "e7a55193197248b61ab29c80fa878f7bcfbd4a812b00bcbecec3812f1d2e5824", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025479, "uuid": "fe61d799-9b25-4956-9ac5-da5044391c24", "value": "T18DC32802F98184FDC0CAC1340B6FB63AA976F1DD1238B2EB67D4AB123D4EE615E1D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025479, "uuid": "bc3540a8-8366-413f-8f33-207b3db93d03", "value": "3072:e483TghM/1weZbcnITO1yosFAIxnJdhgpDb7BA7WobozQPAdojgaR/E:eH3TghM/1weZbcnITeyosFAIxnJdhgJj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777025479, "uuid": "a5245684-a2f4-4933-a812-2dae6a19875c", "value": 125472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025479, "uuid": "7f734ee0-d777-40a9-b562-b590da9230d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "123465f8-3fc6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777025536, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025536, "uuid": "6598c700-0d45-4243-8e0d-2da05d60e8e3", "comment": "Malware payload (Mirai)", "value": "6b8df667994ee243fd8674681e57a1df", "object_relation": "md5", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025536, "uuid": "8121762b-0242-4eaf-b35e-1473910a785b", "comment": "Malware payload (Mirai)", "value": "5a144d811cd1e11297357cb17cd3ec236c746599d7e8160b9b448548e82873e6", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025536, "uuid": "aff9855b-2d65-429f-b291-adf4d22dcbe8", "value": "T1CBB339C1BA43D4F5DC1641306177F73B9A32F0791239DA87E7A49E327C92A419D0A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025536, "uuid": "f4199441-d8f8-4c99-b897-d14f444ce4a1", "value": "3072:PbKW4dCLFaGFBu3/45g1rcV2wrzSr9bMFflk:Pbj4doYGFB0/45gdj9ulk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777025536, "uuid": "3d3b4e83-4adb-4624-8308-cf948f1815cc", "value": 107824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025536, "uuid": "718f68e6-9da7-42d0-b9cb-7838e7c3ba4a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "124b0010-3fc6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777025536, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025536, "uuid": "21258d9f-0594-43e4-bd9e-39d9f11e35ca", "comment": "Malware payload (Mirai)", "value": "74183872c0fe21217fdbb5f6cdb5bc48", "object_relation": "md5", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025536, "uuid": "9045808d-3352-47f7-9189-3f7b325f6383", "comment": "Malware payload (Mirai)", "value": "e9d4d3f1a7ef21c8f2af84449bca929e0a8808d25868c7dea5fd4ffeb07a7083", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025536, "uuid": "e9adb528-d318-4a0c-9a6f-06e6c86f0edc", "value": "T1D3D33841B9829A27C5E523BBFA6E018D332563E4D2DF72178C215F217BC691F0DB7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025536, "uuid": "f07020c0-8453-4bde-aa16-171379a19f4e", "value": "3072:snFif7apx6XS+kUgpjWXlsCMobmaY0qhzCQSp:sn8ZS+dQWXlsC17YbOQSp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777025536, "uuid": "257bcda2-cabb-417c-a381-e393a6c72dba", "value": 140756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025536, "uuid": "009ff8e9-ba25-418f-ada3-95867b197f5a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "248aacf8-3fc8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777026426, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777026426, "uuid": "195a5b13-3f7e-4dc6-bdc8-ec0367cccc8f", "comment": "Malware payload (Mirai)", "value": "0ab1fac88fc74f5da11076047752fcca", "object_relation": "md5", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777026426, "uuid": "3ac9c1e1-146e-4b50-afce-cb962f238ac0", "comment": "Malware payload (Mirai)", "value": "19831ec7fd93f7f4adefae92370a360645b9f5b84f1c04b7f1d077a954152f21", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777026426, "uuid": "be700afb-f42f-4b5f-8540-8d20aca84088", "value": "T116F2F1DCB4894235C912F679561C99AA05662AB40FD7FB06F036F2FEC2F50BB27B00", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777026426, "uuid": "21560491-bc9a-4464-88e5-720fa1c50f12", "value": "768:+X5qCmK1MZJCilkcXAA18PkKNKxITHFAu4GxB+93d2:BK1yvkcz8MKNTHFAkBq3M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777026426, "uuid": "029f2c9a-9573-4633-aefa-76eb09579301", "value": 34532, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777026426, "uuid": "ee1b57cb-7f8b-4bfb-9fb6-32cd0b461928", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24a10f67-3fc8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777026426, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777026426, "uuid": "33a9014e-33e3-4a0a-8d51-1307cf58f445", "comment": "Malware payload (Mirai)", "value": "3666253233b0647795fe0c7c299048c2", "object_relation": "md5", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777026426, "uuid": "df120acf-3f63-46a2-ae2c-1e1e037c5dbc", "comment": "Malware payload (Mirai)", "value": "b715a553ca387bf592a21ac3cde18f2f875afab2c86afcfde6f8d68d86f46897", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777026426, "uuid": "29aa239c-471e-4ee3-ab9a-e5050023b0e5", "value": "T1FED39EB7B70F1091C82506F85BCF5B9D2E7325415E2B86E77C7E323A6A720CA5901B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777026426, "uuid": "23b267bc-f9b8-4a5e-9035-20e876af30b6", "value": "3072:YTeSJNIY8srm/hVSWynGlOTqnpP1gXCR5gEhj0/q:meSk0m/OWArWnhMCRSEW/q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777026426, "uuid": "5d73ba7e-a778-451f-8f11-60518aa82496", "value": 140776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777026426, "uuid": "11fe273c-e6b9-435b-aa6c-b9988be70242", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c5cd163-3fc8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777026493, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777026493, "uuid": "d0a96b03-b0c2-4ad3-8c35-1673e11d108a", "comment": "Malware payload (Mirai)", "value": "a83c4c9b72d30bbca9bbab2c3f4053e6", "object_relation": "md5", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777026493, "uuid": "e48fa3f7-a977-4f00-bef7-07e7136db61d", "comment": "Malware payload (Mirai)", "value": "7dc4c34e87602d457938b29fd7963e01023423e33fd1ac3aba1f7c839b900848", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777026493, "uuid": "9ed6b71b-4cf6-4dba-84da-04614851aace", "value": "T11D515EC461A11272A8BD996273E9824431FCB4D799EE3E48BDD8B8F482CFF04A051F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777026493, "uuid": "60f66a6c-edc3-4294-9bec-6bbc9e28161a", "value": "48:iphX3pz4E3pEqE3pQx3pcdc03pE53pKOF3pjnvP3pcB3p1x3pWR3poR3p053p/9R:ij9SaCeqG7B6twiu7h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777026493, "uuid": "dd7e9858-63dc-4770-8f8b-2fff189f58eb", "value": 2884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777026493, "uuid": "fbdf5f88-c9d8-435b-aacf-57a03e1c66ee", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8527a6bf-3fcb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Adware.FlyStudio)", "timestamp": 1777027877, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777027877, "uuid": "e32db01c-ae3e-490e-8413-3646adfc3c17", "comment": "Malware payload (Adware.FlyStudio)", "value": "d214177dfdb85122a10fc7afbbdc8470", "object_relation": "md5", "Tag": [ { "name": "Adware.FlyStudio", "colour": "#fe6a19", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777027877, "uuid": "421ae7a4-22b4-4a3c-827f-c408335f3f40", "comment": "Malware payload (Adware.FlyStudio)", "value": "7913d7623f710930e05fe00046a797a82ff7e4943a071173b635685f122f7037", "object_relation": "sha256", "Tag": [ { "name": "Adware.FlyStudio", "colour": "#fe6a19", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777027877, "uuid": "e4b78090-e252-4299-ae96-3773e56ec081", "value": "T1E3E68D23F210E5F6E152107052B763781A367B311D27AA77FB904EF42FB4761EA262", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777027877, "uuid": "8039fdcc-57ca-49bf-8e9b-4d1293f0e46f", "value": "fdba9d2510933502dd7bd33c4d3181f8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777027877, "uuid": "113cfa47-6ca6-4918-8b0d-175c024fccc0", "value": "196608:hgjDhAWjA2Pbe8GhcBOzzflQ2EpZdaul48DueJO475R:hypvzef6OflQ2EpZdaw/aOR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777027877, "uuid": "692aff7d-02c0-4c0b-a1b8-4c08543b7dd7", "value": 14426112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777027877, "uuid": "0157d493-9a6d-4b1f-9945-67033f8b4642", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28262345-3fcf-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777029438, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777029438, "uuid": "125930de-4f28-4120-81a5-c1658fa469d0", "comment": "Malware payload", "value": "e916c256e29db8d7299b2a4cec1753be", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777029438, "uuid": "981bb153-01fe-45e4-b1a8-2b2290f22b3b", "comment": "Malware payload", "value": "3ae93077cd58318d1e0fe2f29d50703cd8624f9b14f07d6726edcffbb4fa2828", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777029438, "uuid": "601c6210-324b-4379-ada0-cb10e42b17ff", "value": "T14CB09245F4A0B3A3C4014E82B0A1440250D7E8990F290F844B8C28E6495E905B473A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777029438, "uuid": "734eda44-81bd-41a6-9c54-e6aa5fe21a51", "value": "3:ebgQRKC6QX9LrK7NBzSIGA2RJqaCjLv:ebcC6QZrKpKab", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777029438, "uuid": "81019edb-bf52-4b52-ae9a-471bd0865c78", "value": 110, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777029438, "uuid": "921d3250-4da1-49e0-b601-06ce976e414e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b94f2546-3fcf-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777029682, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777029682, "uuid": "6176f4b6-e712-4204-bfa7-a7ecffccd075", "comment": "Malware payload", "value": "2192b7d52c645de695723bb7339ab0fe", "object_relation": "md5", "Tag": [ { "name": "Adware.Downer", "colour": "#fe1fdf", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777029682, "uuid": "47344a2f-1476-4177-9ea7-bd72efd4e041", "comment": "Malware payload", "value": "a05182de9e342f36273c7c66cebd24f954acb0832b30548bb97a0296c7fb1ced", "object_relation": "sha256", "Tag": [ { "name": "Adware.Downer", "colour": "#fe1fdf", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777029682, "uuid": "f44626da-e2f8-4509-849b-8aaba9e80122", "value": "T1C703A41AD17B029D3407D4B53B95278732D1216FD389E81CBFECE5540F46DA98AE2B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777029682, "uuid": "bfa37343-2c1c-4b93-9666-1fbb9efec9a3", "value": "768:o4rFlFaOrFEFa81b2m2reqe+q8cgk/RrIaut2:H3z2jl2m2yqe+qCk/VIaut2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777029682, "uuid": "537d3992-5210-40d5-8c0e-e8ece8aaaadd", "value": 39779, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777029682, "uuid": "318c2e03-df48-4175-9e42-ee95dcfd3172", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd60150b-3fcf-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777029689, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777029689, "uuid": "98df315b-2814-4a0c-a657-5988ce4a8149", "comment": "Malware payload", "value": "c84f52121442924599dceac3ddba9662", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777029689, "uuid": "4e6c98b2-72f5-4384-ac0c-462301af0681", "comment": "Malware payload", "value": "09acdb74790372d757e3ed998a50893d18641fd0b3fe9acacc33a4f2123bc7bd", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777029689, "uuid": "c6ccf78b-5819-40bc-bd49-a847b9aba5a1", "value": "T16134E08465BCFC0BA49F108526E18F58FADF2115E44E9B310EA7377BA1E5F25270A0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777029689, "uuid": "52d04653-35dd-4474-981e-ffdad1a0ddfd", "value": "6144:aeyu1IHQlt97MKXXkcTBk2DCv/8vzNW4ybc333333333333333N/u7nd:ae5ewlvMKEc+Dv/c5Lybc3333333333u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777029689, "uuid": "100863bb-07e5-435d-bdb0-81e2c8860093", "value": 247889, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777029689, "uuid": "2660edcf-d209-4708-8afb-201ef50877e7", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1066e82-3fcf-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777029695, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777029695, "uuid": "dddb9d49-64f4-49e8-8dbd-0554bc350749", "comment": "Malware payload", "value": "64eb7ad3aaf9b6639ccc5c0b30b6e59f", "object_relation": "md5", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777029695, "uuid": "6eb522b0-ae03-4973-b0ae-87513a04ae99", "comment": "Malware payload", "value": "9df11356c5ac61d2aa7b5425e6322fc016b0ed5790dacb201396500b3eee03f7", "object_relation": "sha256", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777029695, "uuid": "ec6aa413-c6f4-4371-89a6-9b03e1a0ed6f", "value": "T1D7F23B49BB58C12ADBAF0E7D75621A50167197521203CFD53ECC65EEFF937008612B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777029695, "uuid": "d9c6cd5d-9035-4c7e-8fd2-183fa063b112", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777029695, "uuid": "d6b92d56-6304-4310-9ab3-1e53fea40d71", "value": "768:dmQZqx1lYcTYbFyf8qsIVeljnbaoXbYC10kof:d0lYisIVeljRbPof", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777029695, "uuid": "c1f5bacb-55d5-410c-8244-7e79a426ee23", "value": 36864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777029695, "uuid": "4cabace3-80dd-4bc9-917d-a1025866b16d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40c31614-3fd6-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777032486, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777032486, "uuid": "d64afc36-3492-415b-b1d4-c7cf25b12413", "comment": "Malware payload", "value": "eab590f3307b7ea0462b4e540eabd68f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777032486, "uuid": "66079fd9-5555-4292-87d2-7b3f18bc5d2c", "comment": "Malware payload", "value": "946c6e703b045c80c79ce7f07549caa3f10750d38195d675ac00133c695581ca", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777032486, "uuid": "90710130-822f-49e8-bf3a-f93ec7c11b4b", "value": "T12493E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777032486, "uuid": "8cff7d3f-1b93-49bb-a42d-831d32bbbace", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXQIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777032486, "uuid": "8a10e61f-56d0-466a-a23a-dc2b90ff9059", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777032486, "uuid": "86e9fd36-9d43-45cc-a65c-e685fb01313f", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a8fef267-3fd6-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777032661, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777032661, "uuid": "8790df2e-8249-4cdc-b7d3-05534f1ae31f", "comment": "Malware payload", "value": "60a0ae511cc4c556db0d55e2ac422e59", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777032661, "uuid": "ebce2dc4-21ec-4f09-a678-c284fe557a5d", "comment": "Malware payload", "value": "ce27fc39f7ba3b707443d2251319a215436d495e3a55866a57b324fe2ba3c8fe", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777032661, "uuid": "35521aef-257f-4da4-b15e-a9178e6cd126", "value": "T1708309327488582A210B428FD267336C70EFDCE2D611E5B6F6F622344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777032661, "uuid": "cadf881a-b89b-426f-8788-b73f9ee97b16", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnLWaJVN/:XEKltp9txAX/yr2pbLWgVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777032661, "uuid": "6ad4a809-22d4-4ff9-87e9-fa3fc6c75e35", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777032661, "uuid": "10860034-b091-422d-b582-c174ccab9a6f", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cdce4abc-3fd7-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777033152, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777033152, "uuid": "a455b4fa-d882-4784-9678-a036ceca0ef3", "comment": "Malware payload", "value": "cb92d50e7472811afe641a8eb5724a74", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777033152, "uuid": "74c810b8-0914-4806-ae41-6d5ba35cdc5a", "comment": "Malware payload", "value": "d8cb3d185e130c5dad85c3dd34d4ea94ec45a109318f157377470ed2179f5ff3", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777033152, "uuid": "487217f6-5d54-47a1-aa24-b8a0faaab6b0", "value": "T128A51DE5389C18894E13721AC0EBD48165909107E0667C7EB693C3A7EFA737ADB53C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777033152, "uuid": "7fa6a8d1-04c3-4f48-8d43-1079958738cd", "value": "192:GVgOhc7Dyt5yar++Oqr3Qn5z8jfo1oIfW6OGWA35D/yyjhOCVQCOx9XWdiVTDMzM:5Ra", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777033152, "uuid": "ab4315b6-4038-484c-9992-83fc325459bc", "value": 2193541, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777033152, "uuid": "916edf8c-c8a1-4d4b-8f82-6cf049f850c9", "value": "application/csv", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "975dec1d-3fdb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777034779, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777034779, "uuid": "5d7f1007-6281-4a9e-b8eb-7d41e286a9ba", "comment": "Malware payload", "value": "9a1d26c1eeecbbda78dd99024cf40da6", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777034779, "uuid": "c45a43f4-a17b-470c-89f7-5fda410b44cc", "comment": "Malware payload", "value": "a65c9a25515bf85ae6be27ff07de391721cb095c7556baf9020d6f132ea00c6b", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777034779, "uuid": "285c9ec3-c07c-4114-a919-358d85a6551b", "value": "T1DBC3124AEF369C0ECB402DB226DB5F8E9C6D7A5B41CBF4A879C1C18F17A01CD79522", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777034779, "uuid": "a24fef2a-6f19-4d37-aeb2-8eb7926daf71", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ1y:p3lOYoaja8xzx/0wsxzy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777034779, "uuid": "33cc876a-4c31-4be4-b84e-fef8d68c1ab2", "value": 129024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777034779, "uuid": "583529bc-1d0b-4e05-b780-e59d05650e1a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82b83d68-3fde-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777036033, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036033, "uuid": "8aed8160-a655-48ef-9715-230102f05205", "comment": "Malware payload (Mirai)", "value": "363cae33612a6e683c67e84a27e3ea79", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036033, "uuid": "1c79a599-1874-418c-9b72-154074328e78", "comment": "Malware payload (Mirai)", "value": "a43333cd49455d6c65f8bd3ccb910120a345078dc29bc140c7e994bfe2dfbd39", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036033, "uuid": "49d0d9cd-aada-4d29-a3b9-470a20a8809e", "value": "T1B8245CC7F801DDBDF90BE73644570A05B530B7A210934B37626BB867FD3A19A0927E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036033, "uuid": "ea6b133e-b6cb-447f-83a5-412ea4691afb", "value": "3072:efwidoWBCUCIRzTOWiQIK+mLKUSQrtKuiA+TySNEW8uzvxDkni/6uipkVVjbi/LA:hidZBCUCGlzW8uzZDnHip5LBByZncbCL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777036033, "uuid": "460ae260-be5c-4862-87ad-dafc5c5b72ae", "value": 219200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036033, "uuid": "f440fca2-e1e8-4a32-bd17-796686318db4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82b9dab8-3fde-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777036033, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036033, "uuid": "b37d16bf-f756-4121-a005-c1293f525ad1", "comment": "Malware payload (Mirai)", "value": "c43b0ee82be0ff1ca39a445363163088", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036033, "uuid": "3431f8f9-0ce3-4dfe-85a1-069a0a172358", "comment": "Malware payload (Mirai)", "value": "731bb915a23f7418429e9badab8a959c4bdaf849dac4e06328f3f323250ae9cd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036033, "uuid": "b82c5fde-e46b-4f30-9c0d-537cfcf62637", "value": "T1EB144A02771C0947E2A32EF0263F27E1C3EFA6E120F4F648694E97858675D365586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036033, "uuid": "75ee08b7-d5b9-422d-9b51-c0a70586f161", "value": "3072:/BxImoCB5UyPsZm4Mvq0hPTZ4x4bjnX4I/xsYNcZTU9FenNFnnxffO24FlyC8+4V:/qU92tnx3O/FAf+wGyKAD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777036033, "uuid": "69422495-c632-46f3-8ef4-9283cd807320", "value": 207708, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036033, "uuid": "07dfa10e-2d7b-4b49-b443-6030de3baed0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82bd3851-3fde-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777036033, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036033, "uuid": "d9240058-0b6e-46b2-8779-51088f24378f", "comment": "Malware payload (Mirai)", "value": "c1f77f3a7578c5f02b831abb70792cbb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036033, "uuid": "7560ea6f-07c2-4ba0-b863-15913dbc762f", "comment": "Malware payload (Mirai)", "value": "affb9974be6064a8ffeb439affdc2e5d565d2aa438120e679de6300b9b618e57", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036033, "uuid": "2a17e876-52c0-4a5c-acd2-9b31187f7eb8", "value": "T1D644A71E6E228F3DF768877447B74E25975C23D626E1D981E1ACD2101F2428E642FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036033, "uuid": "7619c945-fc2f-4366-bb6a-c15da00ec143", "value": "6144:qzkfjgjRczSQw1c8JGgaNnm3DUU4oqUr7ZX/ER+VLu3FWnCf6eOtGMyBS:qLPwquE2ZS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777036033, "uuid": "b282abf2-21e3-48b1-aa9b-6a43de76eebe", "value": 266944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036033, "uuid": "078e8f05-4b2f-4610-9bb0-03b4d1f4e4a6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "838f9610-3fde-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777036034, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036034, "uuid": "e4171c4c-bc5f-44ae-b0cf-cf2aedc072fc", "comment": "Malware payload (Mirai)", "value": "9bfc29154a835933802ca64ab293efc5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036034, "uuid": "2dd9e22a-3ccb-42f0-bc64-d53f851f133a", "comment": "Malware payload (Mirai)", "value": "630528dccbf57f83d49d896eee0b12d8381cc6cf74be0ed77583b6b6b620ed19", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036034, "uuid": "0d49d516-ad1a-4430-b53c-447068d553ad", "value": "T1ED44E80ABB610EFBECABCD3746E91B0529CC640722A97B767574D914B54B20F0AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036034, "uuid": "a2cbfd53-0741-4f1a-a0a6-fb9a86813429", "value": "6144:jF2ThdOFRI2HknTDnlkP6DyMTmRaRzbi/xLPamdny5j91FOL3G5JW3fH6SDKK:jF2ThdOFRI2HkTDnlkP6DyMTmcpbi/xt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777036034, "uuid": "ce650d3a-74ed-4f84-9570-5f1b94cc8373", "value": 272672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036034, "uuid": "7a0cc477-09bc-402e-8711-69fdb4dd9c6a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8441d957-3fde-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777036035, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036035, "uuid": "ff9f752c-4d71-4f2e-845d-185a6b92151e", "comment": "Malware payload (Mirai)", "value": "f56168301db07c72bd0c074c2af4edf3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036035, "uuid": "3000c32a-4545-47ad-8c66-a02895a1268d", "comment": "Malware payload (Mirai)", "value": "29a562adc792a2262651f4c870ddaf22a86ad60375b4f185070e717ce3cf3231", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036035, "uuid": "f59aa9cf-e7c7-4654-bbc1-318c40ca7b60", "value": "T1B1048C72E8296ED9C1659070F0F5AF385BA3A15182431FBB68E7C2B95087D8DF109B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036035, "uuid": "93d88bce-f915-4641-b5de-9c63ee83f4d8", "value": "3072:qAWepaVWtgTRBLJ30Dm2mJyfqXOhgWAUWMtPUhQXfJ0:qAWeftgTvLJ3Am28yfqeKNwOQXfJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777036035, "uuid": "54363f39-b60f-46e4-bbf8-d8318d6822b5", "value": 187172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036035, "uuid": "75004293-4721-4330-a18b-bd9dd926c976", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8440f53f-3fde-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777036035, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036035, "uuid": "5d530524-6b91-4895-8f9c-ff881bb7751d", "comment": "Malware payload (Mirai)", "value": "ca5002bf58624a9da28bafa43a1f2788", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036035, "uuid": "04127ac9-7940-4d2d-a2cc-f45b50795d59", "comment": "Malware payload (Mirai)", "value": "de84e4612ea713035803bf419b99a5b74871855028e4764ee755d0286a569612", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036035, "uuid": "e92219b1-70d5-46b9-bbbf-4dca516b0e90", "value": "T150140945FC918E22C6D412BBFB6E428D372653B9D2EE71139D215F21378641F0A7BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036035, "uuid": "10533433-4a23-47e2-8df1-031a60bd9473", "value": "6144:09rj0/NzLg0om4mtrPVE4FLI+n+f0iievSh:09rANEmfE4BIk+fviT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777036035, "uuid": "f81b370d-728b-4411-ab9b-747cffb6a530", "value": 207584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036035, "uuid": "55542132-59a3-4655-9157-28dea677f523", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84434c5a-3fde-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1777036035, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036035, "uuid": "d98147b0-3c93-4b7e-a4d8-04ea1169cc63", "comment": "Malware payload (Gafgyt)", "value": "2d3eb5b4626ecd8f53c21c3028b9654d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036035, "uuid": "23f61bea-9023-4252-b5f4-66b5cee85217", "comment": "Malware payload (Gafgyt)", "value": "54e010ea45d1b75e0d5dc9da8ca92ec1106b1ed7822a88df758cb146479b2e9f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036035, "uuid": "021e3fa1-8b3b-4555-afd9-9ac2c17c9b54", "value": "T165A36B12693D1A1AD0D0643202BF0761B5F22BD916D4D99FFE320D5FEE66390292BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036035, "uuid": "594136a4-d2e3-401a-8932-390390869e9b", "value": "3072:56t99pCuxc5arTxZIZAG1TjPNZKc87Dp7RX6T:56r5gqT/9MjPTKc879tXI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777036035, "uuid": "b59d8c63-137b-4c9c-a508-4ab500c589f6", "value": 100664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036035, "uuid": "55661158-124f-4a1a-818d-8fa6675a8251", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "844e1178-3fde-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1777036036, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036036, "uuid": "1e076ef9-57ff-49d5-8662-bfe1e63c26ff", "comment": "Malware payload (Gafgyt)", "value": "2717940b78a599e32ab7909c9188a4ad", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036036, "uuid": "e183a2bd-3a9a-438f-a1ef-b1ac66d56056", "comment": "Malware payload (Gafgyt)", "value": "a39ce586add5eaac9cf5088326377d267c7d1f149ffbdc9f57de687c27a5009f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036036, "uuid": "d9e18ca9-df20-4806-bc3b-8445c43561e8", "value": "T148245C03B58190FEC4DAC1344BEFB636DC75B45D1238B29B27D4AF222E5DE215B2DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036036, "uuid": "f7caced8-5e3a-4637-bfe3-d20f8189eb09", "value": "6144:RnOklXE2oag1vHG7L5C6xVqtgN7TFM5Ur16:RnllCY5FGaNY4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777036036, "uuid": "8fd9faa5-5a0a-4964-b936-5d26e6938aef", "value": 210696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036036, "uuid": "8edadf84-21bf-4d8a-ade2-5d2bdd7a5eb9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8457286d-3fde-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777036036, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036036, "uuid": "e21c5b4e-279d-4f1b-95a3-2e609618c533", "comment": "Malware payload (Mirai)", "value": "0d8fb648130cf537cb3b1785ce231d17", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036036, "uuid": "34e23212-6c38-4ceb-b769-202a03085d53", "comment": "Malware payload (Mirai)", "value": "5f89efd0e99a87d8aa01f0b17763e7864fcf5fd1d8714becb9f9dc9114380f86", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036036, "uuid": "8c6e874c-5c17-4263-b6c5-849b8912cc4b", "value": "T1A3241A46F8818F22D5D012BEFA1E128E331327B8D2DE72179D245F24778A96F0E7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036036, "uuid": "7d1f112e-0c1b-43ec-b936-1fb751a2a9b9", "value": "6144:pl4DsPTaiQoW6v2cQXzv6aTNg8mtNuBVhC+:paDseiQoW6v7QXj6aZXmtcB3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777036036, "uuid": "9584d9a0-4cfa-4d19-b912-d71fdfb9bb3b", "value": 219964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036036, "uuid": "4da91d07-14b7-4eda-8e45-037b048881fb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8613d9ff-3fde-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1777036038, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036038, "uuid": "e4e768e8-b431-4ede-ad48-5761f99ad832", "comment": "Malware payload (Gafgyt)", "value": "612f11cf0cd98304796c297475cc9cda", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036038, "uuid": "0270e6d6-2b72-4adf-840c-1f73a1641a61", "comment": "Malware payload (Gafgyt)", "value": "8abe890515771106ce49134035f2ac2ec498fc222527962a218752611ad34af1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036038, "uuid": "6c407234-1775-4abe-be27-84c8a490ac34", "value": "T1E6345C42EA418A13C4D617B9B6AF42453333A7B4D3DB730699286FB43B8675F0E73A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036038, "uuid": "ab01f334-97d9-4fb6-9f51-9b7b59cc0ba9", "value": "6144:BP7ymmeCaApgsxCFPRa/8AsGZKCEkAiCVTYeWxM/90t/:BPGmmCApgsxCFPRa/8AsGNXiTa2/aJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777036038, "uuid": "241b9e88-f16d-404e-8ad8-92304cc5f5d6", "value": 234804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036038, "uuid": "8b927080-c343-49fd-906b-14a7c8a8725a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8614f477-3fde-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777036039, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036039, "uuid": "ff241de2-0ea9-413e-934a-3161816bb0e6", "comment": "Malware payload (Mirai)", "value": "a86f430d81e3271296c5c16536b704bc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036039, "uuid": "d351c39d-219a-48db-b0af-9b89d3587244", "comment": "Malware payload (Mirai)", "value": "81196c4f41f2b44a7fbff72838a468b638489472ab53d87d7c64d2d286360663", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036039, "uuid": "f8041758-3671-42bd-a435-a0005ad6040b", "value": "T169E35CC5F247D0F6E8160474213BFB364A72E536112EED83D7B8A972BC61A42C9277", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036039, "uuid": "33853e10-0404-4753-b0f6-f51dc31c4728", "value": "3072:7bvW8fyeUzg8ySDVS+oChlzWcKhHzo8Kpns8WJD4GYh+OUnKMPa0szW:7bDfyDzgDMVxo0zWThHzo8KpsR4vpUKW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777036039, "uuid": "c2849ad8-fc2b-4f54-98f6-c355a103009e", "value": 156008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036039, "uuid": "cd3bdc3c-3306-4fc5-8079-c97c6a557920", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86309e04-3fde-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777036039, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036039, "uuid": "e94e8506-626d-4f54-9a8d-b684f604c63f", "comment": "Malware payload (Mirai)", "value": "59c1dbd3a926c5238763732188ff289e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036039, "uuid": "e20d40a4-5686-4e20-bc88-9dcf51bbb1ba", "comment": "Malware payload (Mirai)", "value": "65a73c35bd3aa9862c7774f09c84963354e5efbfdd90806b75bbc4fc5f2c175a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036039, "uuid": "2cd8554c-ae3f-4945-a1a3-d449c2a0287b", "value": "T1BD241A45FC528E23C6D412BBFB6E428D372617B9D2EE3117DD211F21378651B0A7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036039, "uuid": "7bb58584-0b78-43a2-983f-585d4b4881b5", "value": "3072:C+Fpn2CE/eGHKx/bMUTz1zEHb2A49Z/ilaeak4efS/beS:FFpn2Cq7KlMUNzo6A491ilai4efS/6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777036039, "uuid": "943058b8-6c83-4133-8c16-0e1017ba99a8", "value": 211680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036039, "uuid": "817f5b6c-ccbf-4c26-9afb-71b52f0e2fba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40ce2db2-3fe3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777038070, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777038070, "uuid": "8b522edb-821b-4e40-b87b-73094cdb0e55", "comment": "Malware payload", "value": "d5e0c6157f471c8a64246f5fc05a0caa", "object_relation": "md5", "Tag": [ { "name": "beacon", "colour": "#3b3089", "exportable": true, "hide_tag": false }, { "name": "PrivateLoader", "colour": "#969637", "exportable": true, "hide_tag": false }, { "name": "RedLine", "colour": "#21e59a", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777038070, "uuid": "90697001-fc04-4916-b626-d94f369776a9", "comment": "Malware payload", "value": "6b32d3ccda20f0fc03b014e47fd53fcb7fc36e66d84ccfd57d79e5394db08a48", "object_relation": "sha256", "Tag": [ { "name": "beacon", "colour": "#3b3089", "exportable": true, "hide_tag": false }, { "name": "PrivateLoader", "colour": "#969637", "exportable": true, "hide_tag": false }, { "name": "RedLine", "colour": "#21e59a", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777038070, "uuid": "04da5529-d12a-4ed0-bb58-847e12bcb455", "value": "T1FAF0C084EC4944E5195ACED36A763DCAF26063DA0A6B15A8037DF38A7E1C7E0CD0F4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777038070, "uuid": "ab3ecb76-01bc-4f2a-9d51-7f741ba4cf06", "value": "12:UcXWzdaMM+OsTjdtmVmv6zD3VUw+p89lT4KWuCYya9BJACDg7n:UcGzdaM3TsmslUi9lPGYvRDg7n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777038070, "uuid": "3d425a2b-38a1-462c-8494-c960ec21a234", "value": 550, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777038070, "uuid": "9c0fd448-3cf7-43ef-95e2-4d72c2de330f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0699291-3fed-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777042525, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777042525, "uuid": "b36fa65c-0221-4a24-928a-15d1b2953b7b", "comment": "Malware payload", "value": "c2543b0bd57a69f7be81edabca089db6", "object_relation": "md5", "Tag": [ { "name": "178-16-55-80", "colour": "#b2a786", "exportable": true, "hide_tag": false }, { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777042525, "uuid": "de48c341-e237-496d-906f-57c686853144", "comment": "Malware payload", "value": "0f9171c417bdbdc1876dfd0b8ba74f0eb39497cfce9d7806c2f5907063e08e21", "object_relation": "sha256", "Tag": [ { "name": "178-16-55-80", "colour": "#b2a786", "exportable": true, "hide_tag": false }, { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777042525, "uuid": "5dadcf17-c3b9-42a2-a5b6-e1f0d56d449a", "value": "T17D34EB7DDF0A46D82D86314A1F6B2E54E5923C87183266EE76C82BA408C9F4517B2F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777042525, "uuid": "dbf97145-aea5-48c7-9a0a-35dcb337e6e9", "value": "3072:zJJJKJJJJJJJJJJJJJJJJJJJJJJJJJKJJJJJJJJJJJJJJJJJJJJJJJJJKJJJJJJD:6f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777042525, "uuid": "ddada0d1-13b1-4a9c-8af2-88752761e2c4", "value": 241966, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777042525, "uuid": "700a1c7a-c248-4f56-be92-5f5b5533c698", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20649806-3ff2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777044458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777044458, "uuid": "248fed2d-55d7-4d52-9e12-90c2650bf213", "comment": "Malware payload", "value": "5343f1eb6ab4d78ee50b08bfbdcd2808", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777044458, "uuid": "cef7914f-1345-4ac6-a897-88c44aae02c0", "comment": "Malware payload", "value": "d4c842c455ebc4dfe0f5584b83cd8f02eb2540d31f74414c10ecd92deed04142", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777044458, "uuid": "1ffad191-dd07-449c-9fa7-c22dfa276755", "value": "T1A885E047FB1C4522C9570EF0197F43D5F7217A5341F5A22A270E67672222E3AEAC73", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777044458, "uuid": "ff4f859f-537c-4842-af60-7676bcb2a7c2", "value": "24576:xHUcf3MuHMwp1W6mYSWgZXpAvMCs75qbPlAuRFcag8x/lY5KceDz5oorw:xHUcf3MuHMwpsdZXpabPKag8JwKxDz5w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777044458, "uuid": "01913bde-2f6d-42ab-b24f-b3ae35edb2b8", "value": 1708717, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777044458, "uuid": "fee2e3d5-144e-4adc-9832-e6c0710c6698", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd7aea19-3ff5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777046010, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777046010, "uuid": "b9fe8368-0a99-4455-984c-726b811124b2", "comment": "Malware payload (Mirai)", "value": "39b84b57b0b4e711caf230c1e64b0323", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777046010, "uuid": "d3f17989-8365-4100-9ce1-f8247478c0ad", "comment": "Malware payload (Mirai)", "value": "b5f49312761746ced2a4c6467b7e88d6caf5f4d1387cb282d12dbb4fa2bbfe93", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777046010, "uuid": "c35717b4-547b-4761-94cf-8d83a618689c", "value": "T1BCB2D03C1B151BA8DE1EC0BD439D1B503CB81B359182AD5B6206EDC7AF9A8B47453B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777046010, "uuid": "61019838-11a6-44af-a936-a171f64a47d4", "value": "384:YeD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiamdtJgGlzDpH7uNj1JA4H:YeD8ZSWvZHZbs1row697qohQvg9aitJ8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777046010, "uuid": "5947336d-782c-4a80-b713-fd7bea13e8cc", "value": 23784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777046010, "uuid": "f1b81cd2-f644-4e24-b600-1d0695908a8a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4aa4a260-3ff7-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777046676, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777046676, "uuid": "ee39f833-c567-4687-8eb3-af3ec5aa9771", "comment": "Malware payload", "value": "75696158603fceaf32fcc4039ac3965a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777046676, "uuid": "012019b0-047e-4a47-8e5c-c80b6f6318ec", "comment": "Malware payload", "value": "fca130283f5ef6cc2c6ed66f6d8066cfb063cced00aa3a22565bd889e240e1cf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777046676, "uuid": "c240c071-06f5-4610-90d5-8df57151a7e2", "value": "T10465D002FF815FABC06FCD30892EC35711E9D98696C1A62A71FC4B9CBA5D35A0BD35", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777046676, "uuid": "4f419ba4-bb70-436f-b1e3-4c159fcecb95", "value": "24576:ZYnr5PrLsOf860KhwVfLeyxHbmniDoGk9wXi1MJXfAHCg2T6O0MykyYc:ZIrLyrVTJ4FMyPjOYqc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777046676, "uuid": "90b8ce1d-2afe-457c-8183-384804be75a7", "value": 1492542, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777046676, "uuid": "f4a2745c-0fbd-421c-87d0-f72a8f668596", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6893d809-3ff9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777047585, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777047585, "uuid": "5ef05849-d21a-4fae-911d-c76ae4ec5bad", "comment": "Malware payload (Mirai)", "value": "7997df296a348d06c0be9eac67ce46ab", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777047585, "uuid": "fbb0afc4-fc9b-4a91-9eb7-52dd01d72763", "comment": "Malware payload (Mirai)", "value": "6e4fb9d1744961bff999e99c33ae2321b2bda63ddf71421b2ba4aa2db6bb8e7a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777047585, "uuid": "2f98320a-7582-4939-bac2-8b68128c3737", "value": "T13182CF3061AB74E4CBF14435FAEE8EC6971A0BF8D0FC369317586B78894650225F93", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777047585, "uuid": "75e01ca5-984e-481f-a8e5-1b2e5de6110d", "value": "384:MnfzRV0P6iOwrkom0DRnVATuSlShu6NvmPWtUn+KMaxIhymdGUop5h5le:2dV0P6+kom0tVAoNvm+to16s3Uoznle", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777047585, "uuid": "14b7292f-4ba1-4cfd-9fde-0b563907a727", "value": 18488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777047585, "uuid": "b0706176-b92a-46a7-8421-283282a4fede", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0d3c224-3ffe-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777049854, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777049854, "uuid": "16b16326-69ce-40f4-a360-6e544171daf0", "comment": "Malware payload", "value": "d9ecc9f48951c0edc6bc3ced758740cd", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777049854, "uuid": "f0c72ce7-cb07-4300-961a-1dffbd20abd0", "comment": "Malware payload", "value": "87f2bc4da0d5e699c74ea5054f5048cd38d91e1ee58e439950ca1476c7bc2f99", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777049854, "uuid": "20ea925d-16ad-4f1e-b0df-bacb1a8e7b0e", "value": "T177931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777049854, "uuid": "3f44da1a-dace-4e8f-bafc-f9887dff57fa", "value": "1536:nByp1tF/uwMmAIa14oX/KIlepeV7tb73WdxCrCitkb5fv2v05xWjrIKU/s1kK1rW:n8JIe0GitkbFv2v05xWjrQ/s1kirty7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777049854, "uuid": "a9a6f2f7-7554-436f-98ae-7d002c3e9b26", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777049854, "uuid": "07584c6e-6f7e-461b-b04b-d7a344590f6a", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ab38902-3fff-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777050139, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777050139, "uuid": "dac1ab6a-9c74-4d35-b96e-2df143b388c2", "comment": "Malware payload (Mirai)", "value": "ba7f9fa1b64b67d581d11f47e443a946", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777050139, "uuid": "0393f7ce-88e0-493a-b53f-fa3fc1b9a344", "comment": "Malware payload (Mirai)", "value": "0630ab17e5835270c5df6efd53b30b975f493ddcae716ca63eba76e037baf547", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777050139, "uuid": "6205848b-7e4b-4858-8743-8dcb9b7effbd", "value": "T16EA2D11576632D66F3ED1C3DC86E8357B9A61BFCC0F532B679451620C90920A3E39A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777050139, "uuid": "366b98cc-5857-4b4f-a5ae-c2a3268aa811", "value": "384:TvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjmwhymdGUop5h3:TvQn4j+ZO5fKAlxKws3UozR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777050139, "uuid": "9d1e956d-c7cc-4fd4-92d9-0797e364cf3d", "value": 22168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777050139, "uuid": "240598c6-2ca8-4067-86dd-f8286c75f3b2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6fefde3-3fff-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777050267, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777050267, "uuid": "d3f9087b-6104-4bf6-936d-764faa01c513", "comment": "Malware payload (Mirai)", "value": "e19a254fe2836776f957299e7831f090", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777050267, "uuid": "304257d3-4731-491b-8787-2a07fb1d2e3a", "comment": "Malware payload (Mirai)", "value": "8e8b3702eac6143deb8e2641c5731bb8ad6b1eef1985433b1172c7abf55b9393", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777050267, "uuid": "1c41aac7-e7d7-4fc5-a07c-5dc427f9c96b", "value": "T10AA2D029D3456EF4DFAF9D9093C2C2C276E547C6278AC8E240FEAF012616056BB89C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777050267, "uuid": "e5844597-4559-4374-b771-ff5dc33bfc7e", "value": "384:m/JywWc84Tp2YshxqlDeAkSqjGJLeCE5zRW6C5bRMLM4uVcqgw05VxJc:mRxsSVsMD6xiJJE5zRWNlS44uVcqgw08", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777050267, "uuid": "9855f8e4-3956-4430-8a62-591b0bea275c", "value": 21884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777050267, "uuid": "ea96ec9b-8014-451a-91c1-6f9de6a5933a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3fcc0781-4000-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777050523, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777050523, "uuid": "49f0b4e8-d4c4-4e55-bb7d-6ffe5499f677", "comment": "Malware payload (Mirai)", "value": "2dec6811e4153ac269e7bc0730caae38", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777050523, "uuid": "1855197f-84cc-45f3-95a7-a4c0f7be1226", "comment": "Malware payload (Mirai)", "value": "f44080bebb4c37db1c66e0d9ea6db3a522814c56912310a0b6c29ed14a4d2950", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777050523, "uuid": "35834398-e31d-43b9-ba0f-20b0ee960996", "value": "T1A0A2D1BFE8D64997DDAAE53B011D00CA50BB5C5413A783C23FA535B389678E8F8366", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777050523, "uuid": "a844d79e-bfb9-4f84-ad08-b21a1804e707", "value": "384:MccDqRfKUWFH39z+/49ETVQrGLruI8qB+eANnlBQpMr/1W7MM+v1Rpx:NMkKJFH39CBVQey7qsZoMTA7Epx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777050523, "uuid": "8793664e-08b4-4974-8baf-18608713b2cd", "value": 22448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777050523, "uuid": "36eadc15-c8d2-49a4-8fca-b8bc5e1cdfa3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a89f543-4000-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777050649, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777050649, "uuid": "9d4818e1-b9d4-4837-b7b6-084bf394afe6", "comment": "Malware payload (Mirai)", "value": "00f8d9c7934e3b951c0ca8b279c5a4fb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777050649, "uuid": "02ff5a22-9a12-44dc-8a27-9af19cadc285", "comment": "Malware payload (Mirai)", "value": "2b9ea9f8c1fd8d585d0252b8761787f2dec03f5c6995c7d00c3a5374343e137d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777050649, "uuid": "fbb1f14d-6c4b-49cd-93a2-bf229959d85e", "value": "T1D0B2E1AC40940E05D85B41FF9AFE05E6E66184834AFFC7D99F270CC3E2B78A2791C6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777050649, "uuid": "3fbf7492-4532-4a94-8d73-9e3114cf4db9", "value": "384:MniiBi3f2PSrf64K5WFSlvNjJ6mAN8bhmglJbN2EIKHT0P6+PbhDYOK6sNreeCVk:xiBiv2PSbePxNNw8dtlJwEIGT0P1PbhO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777050649, "uuid": "f6586209-40db-43f3-b918-1f512be1d93b", "value": 23440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777050649, "uuid": "07d7d409-d435-4634-a58a-898a68cd9df9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3075e4d-4000-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777050770, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777050770, "uuid": "5a694378-894e-4a12-b422-9c79167c19bc", "comment": "Malware payload (Mirai)", "value": "df9a4d5cdb41e78d5d08df42fdf63b69", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777050770, "uuid": "51a32f52-7a52-4a75-9027-972eeb25e718", "comment": "Malware payload (Mirai)", "value": "ba47ee9911c3745c82159bf64d2f419c6f46a5083a8766d79ad596909d7764da", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777050770, "uuid": "9530a82f-14f7-404b-861b-05300e13c42f", "value": "T178A2E17DFB20C1CCF082847E2957127B456FF8A64B98420E6E15D0C700C39DED49AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777050770, "uuid": "292d0244-862e-4fe6-89e1-db6b05c3db93", "value": "384:TDYC95A2rM7RjFrvX2V6H2XJ8LaHYsbX1chiM4HhBJhpExUC03uhHB3QJmRxm+c4:TDZ5Dw7RjFjcU+O24sDS4HhrhpEguX3B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777050770, "uuid": "f27810c6-a31c-4eb5-8d2d-6c1cbcd4b5dc", "value": 23260, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777050770, "uuid": "8e7a81d6-12c6-454f-b800-0ced27e4bbb7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c829339-4001-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777050894, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777050894, "uuid": "a143552b-f163-4547-b009-b06336edade0", "comment": "Malware payload (Mirai)", "value": "562ba149b98ddbc6aad339eac784dacd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777050894, "uuid": "c53c75a5-feba-4eda-94a1-59d5e1550402", "comment": "Malware payload (Mirai)", "value": "ed571d767ae0319cf7f6f23fb8744fdeb99280b88b463f75fc74280602377f8c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777050894, "uuid": "aa234453-b6eb-4684-9b5f-771b0cbae7ea", "value": "T1B6432921B53A1F13D0E0A47D21FB4B59B1A15ADE26A4C64E7D720F4FFF11680A943D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777050894, "uuid": "49f03735-70f3-45e3-ac24-4cb731a245ef", "value": "768:RqowmZPu9wtnfbltWgC6BSJsBcfDSTFIuQKqgESnmC/xO+KpAw4:RqtmZPuutfbltZFBSJsBcfDSTFI+BE4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777050894, "uuid": "ea6aba48-b270-4e9a-887e-ded161b31a92", "value": 58376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777050894, "uuid": "cd6d5a88-d7c6-456c-868a-60ba37d702ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f8b14fe-4002-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777051409, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777051409, "uuid": "196933d6-61ca-44a6-b00d-81a92b354e5e", "comment": "Malware payload (Mirai)", "value": "2952dfdb3c4dfc5cf5bb1dbcb11b4549", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777051409, "uuid": "2b2e1d1c-920f-4c7b-8650-ec544e09bac4", "comment": "Malware payload (Mirai)", "value": "d68ebfc2c9650383c3fad825f1a07279b1141c63a86b26e2f38b88b007179c67", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777051409, "uuid": "e5aa6819-c94c-4c74-8a72-d705b7f7771c", "value": "T1EE330A8EB8029D3CF91BE6BE54164E0DB93177C152830B2767BBFDA36C721945E02E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777051409, "uuid": "ea6145a7-ec00-4447-841e-80a26acdb52b", "value": "768:gduPBFnHooqR8qOCKq2cH4Kg9e+TK806MMUVjzkfQXObHud2oGg:r/hqaJMDg9eqK806MHdkfQX6HuCg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777051409, "uuid": "e4a81375-a605-42ae-bd1f-d571c8fd0081", "value": 54932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777051409, "uuid": "2701f292-fcd7-409a-9505-ddc2b86381be", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8dd5b35-4004-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777052552, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777052552, "uuid": "e25d85cd-94b3-4154-b462-260f6a0266b2", "comment": "Malware payload (Mirai)", "value": "c6696e1a10ae480610ae993f120dbbe4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777052552, "uuid": "405651e6-ca51-45e4-8689-2f9553ef0291", "comment": "Malware payload (Mirai)", "value": "f12fd1151108655f2f0658403d05775eb81bba95f7645c02f978501364a12ae1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777052552, "uuid": "4edf6eba-6334-4ab9-b1a4-aa127cd3c4a3", "value": "T14BB2C0CDA1943084CA8D7C7C278D4A664F6CA0D0BAED9B16E350CD98B3BEA4F745D0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777052552, "uuid": "076b2899-2fb1-42ff-aa15-5ab2e03c5459", "value": "768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBp6ZqSWv9:4QlS07FUXqIYSXQKquOq1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777052552, "uuid": "782bf3af-0aea-4007-b24d-ef06ca2abbb4", "value": 24912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777052552, "uuid": "9aae4181-e0a9-4e21-9807-ce36d3e3a0a6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10238069-4005-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777052591, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777052591, "uuid": "6ebd8ee4-7a9c-42f6-bb5d-505ee23ab443", "comment": "Malware payload (Mirai)", "value": "9363fd6854c5bef85624d9d783290c14", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777052591, "uuid": "c5a9d4de-427d-49f8-b435-bb211fcd599b", "comment": "Malware payload (Mirai)", "value": "cb772aa889ec546f1d5511427155889a20a6ede481e48287bbb00f6c021cf9d0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777052591, "uuid": "089e9bd6-43ad-4547-abc6-2425d5f3fe64", "value": "T11F336C36E029DED0C6560234A4E88F751F13F1C883536EBB2AE546B2645396CFA19F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777052591, "uuid": "2c08a239-d295-4e15-9e9d-28f680baa665", "value": "768:Oa2vU7eng2qGJert7LrLMU6fgatQh+YbT/9+m3CZQoV/bnmCozw:Oa4U7G7SvT6ftBTm3KVrmCo8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777052591, "uuid": "5d1bf112-98cc-4efe-99fa-3e7cac9c96c1", "value": 50168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777052591, "uuid": "3c923a42-7d6a-4c21-8826-70c3a906ec0a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33de84f4-4007-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777053510, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777053510, "uuid": "5f6e7e95-33b3-46b7-87c9-e4b1f606eaf5", "comment": "Malware payload", "value": "755c355d23e993810c46c981ad083e3d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777053510, "uuid": "134963a9-2580-451e-a7a8-c5a4fa03781b", "comment": "Malware payload", "value": "8b7aa59c7c4ed14a66eed96f10716fcab9c7c1f733e196a1793ac5fe0b02b304", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777053510, "uuid": "cc24a5d4-45b2-418b-b76b-c059d6e86cbe", "value": "T15175E0A173855663DEA48B7106E28370A7F5392252F3464EE312272C0F725AE6D1FD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777053510, "uuid": "bdb87c28-47b4-43a9-b6e2-1c87e4bbfd6a", "value": "24576:TD1HGqhZd4FILjPYubEn206uIO/d0hrRpfl09VewdWC4F7UbWE89boEqmcxG:PZYILjP/Eh6Wd0dRp5u4H9bGtxG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777053510, "uuid": "a34f1d26-2797-4c9a-9797-12dcd4c1a8b8", "value": 1640817, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777053510, "uuid": "daa9a222-7d0b-44de-91a9-2293e34c27de", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c876974-4007-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777053686, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777053686, "uuid": "73922752-b7aa-472f-9ea2-66e181dd6e63", "comment": "Malware payload", "value": "aa83fef9e1896705a2ddc95ffadaa8ff", "object_relation": "md5", "Tag": [ { "name": "a3dacb", "colour": "#a7477c", "exportable": true, "hide_tag": false }, { "name": "clipbanker", "colour": "#5efbe3", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777053686, "uuid": "22d07585-ab39-4f66-b761-0805a3ed32a1", "comment": "Malware payload", "value": "f8e7c3df513d88989ccad1b2a17f88c7effff717e8038cf9a88e7fee7be7ef5c", "object_relation": "sha256", "Tag": [ { "name": "a3dacb", "colour": "#a7477c", "exportable": true, "hide_tag": false }, { "name": "clipbanker", "colour": "#5efbe3", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777053686, "uuid": "3ee979e9-78af-4329-8d9b-2494c973ac8d", "value": "T128745B55B6A40CF9E967823CC9A34A06DBB2BC560771E7CF03A046964F277D09E3E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777053686, "uuid": "dec34b11-fddc-4167-8281-32fc755f669d", "value": "d04feef9f2f0dd0a18187fe3826aaf2a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777053686, "uuid": "65e38e4e-108f-4e52-a352-02be75efe58a", "value": "6144:uJHT55FH7YlvSzzcvgY+MFbnHTfXDt12CKNNHQB/a:urGIcFHFbnHj72tFQha", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777053686, "uuid": "6855395b-5724-461f-aa97-5380b0fb7e7d", "value": 344064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777053686, "uuid": "6030e72f-e09d-4565-9bd3-6fcc40ad9466", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e38a8851-4007-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777053805, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777053805, "uuid": "448158d7-8a42-4058-89b7-e1f71c512ba4", "comment": "Malware payload (Mirai)", "value": "9f4ff48afeadce62618c7b8da020fdec", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777053805, "uuid": "ac0b82ad-b9bd-4544-92fd-03ce75a45a63", "comment": "Malware payload (Mirai)", "value": "fb48c0f267772d5bcb05c4c672374cbea01795e39f1dacb7e2a81feebf5beab9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777053805, "uuid": "508744aa-7fb5-4187-be4b-e7fcd77a951a", "value": "T181B39CDBF24701A0C8624AF007CB4BED3E2723815F27C5E72C6A657968791CF8906F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777053805, "uuid": "c46758b5-8dea-47a4-b128-161fdceafb8a", "value": "1536:Fu27gBY9FSSpj3z5Qxw6YaWWgg13/LWy:c9sSyzz36YaWWgg13q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777053805, "uuid": "bd104ea2-69bc-4879-9c9f-b176031dc0e2", "value": 107800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777053805, "uuid": "e18bfbfa-6a1a-46a2-9b34-dc8c411cd74b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "678847f8-4008-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777054026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777054026, "uuid": "84cc418c-b1e9-4e52-9c5a-50f173c87d61", "comment": "Malware payload (Mirai)", "value": "5c9b822a3a35e3bec473db1e84f7a2d3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777054026, "uuid": "b491029f-e28a-4f9e-9ced-e88f3afd61eb", "comment": "Malware payload (Mirai)", "value": "c1ef7ba6ac632d417af3b23f525470142b435a0e15130869e6c945ec7171d862", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777054026, "uuid": "9bfddc65-b3d5-4841-961f-134df67921fc", "value": "T11E230271480A9EB124703C72DA99938376E12AB1C5673123D6290A3C2FB97531E5BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777054026, "uuid": "50710bb8-6692-4eec-bdc5-942ca210fdbc", "value": "768:D/TYCoIxdEk+AxoTZAZHFeq8b37Z9q3UELbUXfi6nVMQHI4vcGpvs:DECFd+A6YHAx7MLRQZs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777054026, "uuid": "111a2b9c-2f5c-4f5d-b517-288902b65b6a", "value": 46624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777054026, "uuid": "6b45cc6c-5461-4d8c-8e5d-2020bc77973e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "815ce31c-4008-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777054069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777054069, "uuid": "3e402e7c-3bba-4639-b9d1-6b034670d4d3", "comment": "Malware payload (Mirai)", "value": "42727fc3d574976bfd6c4ac7f03a0417", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777054069, "uuid": "1b185ce9-89ca-41db-b471-b0514750a883", "comment": "Malware payload (Mirai)", "value": "060799bd237259d4a837286b0ee4a9b72c7c2f2ff7ff82ffb4f53ebd257fe07d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777054069, "uuid": "88b75b99-44c1-4f52-a4a5-24c73dc9d112", "value": "T1ACA2D029BF58828BC832797455D9E5D21297FCA1F29DCC4E2940C15FF0A33A96474E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777054069, "uuid": "5db1da9e-7998-4b9e-a61f-8852a3746d55", "value": "384:Mg9Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oTH:798o08kxofBE+ZkXaITbp2F2TWul0c5T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777054069, "uuid": "9e9daff7-a160-4b8f-b77d-b9e699d8b883", "value": 21500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777054069, "uuid": "ef441748-30a9-4251-9247-8d82b48e6cc3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aba376eb-4008-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777054140, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777054140, "uuid": "7d78fee9-bc6c-45fd-a4d9-c557770fc354", "comment": "Malware payload", "value": "a22a303ffe908ea50ce29105fa1f90a6", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777054140, "uuid": "cb0d2e26-7a41-4b8b-a31d-d3236edc850c", "comment": "Malware payload", "value": "b2bdb1a9a57565f0de580235d8ae0bc70dfebb5b6d4cc047e96fea3e89f715a6", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777054140, "uuid": "4209dbcc-613e-4754-ac70-2b9b03653baf", "value": "T175663333F56C09C6E437E5BEE0E21690C7E2130ED803D43BD6A16AD471E778A45CE6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777054140, "uuid": "3117d6d9-4e9c-43fa-ad9a-3f5242dbeaa2", "value": "196608:+Zftmuv3UHLTvWmP60uU+HB/OGUElH6XU8YYlbHXUD:+BooW+mP6rU+h/PUEl0U8YYlbED", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777054140, "uuid": "3d4b0ad4-48d0-4f56-9e7c-cae5c89be41f", "value": 6609841, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777054140, "uuid": "30d21d89-879e-4074-b307-f9406ebcf94b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3924969c-4009-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777054378, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777054378, "uuid": "680c0305-6167-48bc-ac7a-7a4c12ed554b", "comment": "Malware payload (Mirai)", "value": "ef77181fe123e1031f22fdb2dc4c846f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777054378, "uuid": "09a7f69b-0303-4fe7-9021-fa24d8baa888", "comment": "Malware payload (Mirai)", "value": "ee86d4bdbeeb8964d739a26477fc6a8a110c554980b9ed4075de82590e0adb81", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777054378, "uuid": "c2e49211-2f6c-48dc-a17e-5c4261af4c99", "value": "T1C2C2D0E07726FE31C420AC3DE52A4C8A7A51067C91FF393664258D358FC1A5B67E88", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777054378, "uuid": "3b8048d5-0614-4206-93ad-83b95bf630b3", "value": "768:4MKyhegCCMqfizjoNpd2vJdX6vwrPu9q3UELu0:PKy4qfqoeJdXWgbLB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777054378, "uuid": "b36a14c7-6289-4f9e-b980-9bf7e1350f4a", "value": 27300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777054378, "uuid": "15a0c763-fbc8-436c-b487-d1dc8868a46d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70e09a55-400b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777055330, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777055330, "uuid": "788fcdfb-1d00-4d3d-a8f7-f0ce81b3348f", "comment": "Malware payload", "value": "9e5cc0dde197ca9ddcb1ad787dbdc634", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777055330, "uuid": "c3fb2f72-65ee-4447-9377-aa2949667fb6", "comment": "Malware payload", "value": "f33f514789690e94270aa5fd512983c31512f6ba6d22ad026a24a34c4f21a0fc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777055330, "uuid": "28c77464-c8d7-465b-bfe7-897947088a41", "value": "T17F65E05BFE9E3C47D2D6E33E9F8AC3B1532BB191D31341523581422CE9C6A9CCBA16", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777055330, "uuid": "d1c9793e-cf29-48bb-a87c-210788b6d251", "value": "24576:dJ9uTMBCNwyCeThYVf+QcNkDZu++hu7JALr3o0WpeTQxwIgo10hvGqZSCoW:tr+of+yVu++QJG6pesxF1e7NoW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777055330, "uuid": "fe095185-d7b6-4c20-91a5-db3c0b41fd75", "value": 1424920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777055330, "uuid": "389a54cf-d4fa-4543-a209-24db98545ceb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9aa8e2c2-401e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777063561, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777063561, "uuid": "13f3b0f1-42a3-4b16-9720-43e6c0009a53", "comment": "Malware payload", "value": "92d967e55f0d8b7db981089d111c76c1", "object_relation": "md5", "Tag": [ { "name": "pw-DR67KVLD", "colour": "#7674bc", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777063561, "uuid": "e50930e5-2d3b-4c18-b770-7b3db569ac91", "comment": "Malware payload", "value": "db635fd24d79bead0590c3daf91648a296f8ddd1ed0ec10e2f18b8fd52086cc2", "object_relation": "sha256", "Tag": [ { "name": "pw-DR67KVLD", "colour": "#7674bc", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777063561, "uuid": "afc55578-71fa-49dc-9d38-0aed6122058f", "value": "T16BA833A041D38F58F3B057535AEF6EA9A0E43E7F1B02D0A49D5C0B5F226D9D4778A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777063561, "uuid": "c0335f16-f6e2-4a84-9edd-c5e57b3f933f", "value": "6291456:/4VIfOH1nSVCVvKIKGU+GaYsv77UXUQrC:/sI0lSivK9GUqYs/ErC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777063561, "uuid": "976f1680-ce1b-4950-8654-b5e0e2cbf50f", "value": 207715174, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777063561, "uuid": "4ca39264-a2ef-4503-9e9e-2410bd67d84e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a43f7919-401e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777063577, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777063577, "uuid": "35e19c38-ae01-4630-a884-9a22e7f90924", "comment": "Malware payload", "value": "509f93218d896071be02c0de956bdf9c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777063577, "uuid": "873996ce-4981-40c2-bc0f-b7573e5922e8", "comment": "Malware payload", "value": "62d1cd88bdd3f8533a49018d15d4a8397fcba68de94a3dd24b3a78133193a17c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777063577, "uuid": "d8063837-509b-4986-9d10-aa4677cd353d", "value": "T1D165CF97A7248856C0706E3BE1A7EBB183673E3119D86A0F9D48F77648B3344CF15D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777063577, "uuid": "6a4801a7-2870-42f0-895d-322f5e0c3e97", "value": "24576:fBAXobSBtriTNF24wn8UHRjOkCcHIga6MRxAg26+KkZQqqtY1P:Kiq8UHtfdFIxAB6+M5YJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777063577, "uuid": "1b609aaf-48e7-4816-9e6f-679f01b79250", "value": 1485798, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777063577, "uuid": "27c1c917-023b-470f-9c13-bd1009fd110c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ae45c80-401f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777063830, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777063830, "uuid": "5662229e-edfd-4ebc-9d2e-d24f1d40eb78", "comment": "Malware payload", "value": "6566616ee548d9e83a95565c926cb687", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777063830, "uuid": "bd2790f3-dc3f-49ee-846a-2fa5eb9df069", "comment": "Malware payload", "value": "01eea3b4904e67c037765ac9ff7af95a25e8fa60e71ace7dcf36449380b4cb23", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777063830, "uuid": "d1450a93-ad21-4012-8489-2f4cbfa4601d", "value": "T10E1222E098E43876828391927916B319AFE9D207CB5E1A6073FC579D8FD2F85DA630", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777063830, "uuid": "1603ae91-9d04-4e57-be5e-626f7dca9aeb", "value": "96:RSrHPSgDt2+1oBaD28qoszlIm37BJQ6NUHIsIscj1jIlX/tu2VD2u0jVBB1q6+:RSrLyaLsv3kRHIszPh0JP1qR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777063830, "uuid": "971957b2-c446-4b7b-9cd1-83592a24d6e7", "value": 9486, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777063830, "uuid": "0ec62e6e-7a9a-4b6f-ae97-002bfde7780e", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "333017f3-4025-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777066394, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777066394, "uuid": "5f1dcf78-77b8-4334-888e-e4d94d1cb7c0", "comment": "Malware payload (Mirai)", "value": "da8f55004e542890460736e660b9c424", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777066394, "uuid": "60494d30-7098-470b-b2b7-ab2f515bca5a", "comment": "Malware payload (Mirai)", "value": "6460913d7b8307ea0a7f38f6e78e68387c7df372c8693ff7bb5c4af4dfc60ed4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777066394, "uuid": "e44b47b4-3c6f-4d55-b453-e3de1cff75fd", "value": "T1F454D60A7B519EF7D46FCD3305F98B0128CCB45335642B7A3670EA5DB62A58B0AD38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777066394, "uuid": "2ce51c8b-df32-4d5f-b3ad-b57cb9f8d2bb", "value": "3072:FXb0nryFoAuINHwtxiN2asQdzD7WPtOrTqBkE7S6VjlpnGqpLmT4Zm:FAr/AuINHwhEJDx/JEFj5JmTd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777066394, "uuid": "936bc6f9-a123-411d-a3a9-3f3a7aad6e41", "value": 305548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777066394, "uuid": "d7196ee7-c31d-4531-97ba-ff887b6e9885", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3355c30f-4025-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777066394, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777066394, "uuid": "72d2294e-7186-462f-97ed-41eed7fe8463", "comment": "Malware payload (Mirai)", "value": "f9c66986c8a0fb320078d2962b2e71f7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777066394, "uuid": "ff8bcfcc-3e32-453d-a181-6c60e2629ff1", "comment": "Malware payload (Mirai)", "value": "453d50f9c6a9da8391bd1771d0c5aacb3df900bd6dd313d1d49b154cfcd3b099", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777066394, "uuid": "b6f2bf60-7589-40a7-b0dd-30a505ecee89", "value": "T16554891A3E22DF7FF66D867047B78930569876D62AE1D584F16CE60C1F2028E241F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777066394, "uuid": "2bbce370-0b9d-43f4-9ebc-c4952c1fdae3", "value": "6144:MILlMEl/9nUy+MtLy58TrMJ/VSwwsfFqjuI:z9nUIJjrqojuI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777066394, "uuid": "ec69665d-b06a-45cf-83be-77cd13ebf7ad", "value": 304652, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777066394, "uuid": "84d3e26b-5a3b-4fe0-afa7-c68fe5e27b1e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76c63bcc-4025-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777066507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777066507, "uuid": "5c2e255e-bd5e-400b-b071-a08aa0b0efa5", "comment": "Malware payload", "value": "4db49c2c92e4c123730ade149520c2b3", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777066507, "uuid": "10b158d9-6a10-43c2-8d9a-08e50e5d01a1", "comment": "Malware payload", "value": "ebcdf34ce7a4d77ed0d0e676ea70c6ba915e6e257d9ee8904ab39187d2115102", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777066507, "uuid": "2f3eb78c-8bf3-41cf-bc66-3f3bb61567d3", "value": "T1B6B4230A85D01FFF899ECB9946D4A4672FF467952F93565BC0CD20700AEA203D6EFC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777066507, "uuid": "40880244-84d9-42c9-a793-61d276e52444", "value": "12288:jvOi3UDYXndLQ/jJOjB89RitlR0XjuIkVp69d3iY829uhBzbY7vPpCkIz:jWiEGnlQ/jwyil0X7kWv3icYzb9b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777066507, "uuid": "4b1923a9-c4c3-44d7-8308-8d874b917104", "value": 540419, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777066507, "uuid": "ff90d4d9-9895-4768-85b9-9f07d8a0efa7", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76ec532b-4025-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777066507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777066507, "uuid": "60da3cd3-8e34-4f55-8b69-ea2e81bc1cb5", "comment": "Malware payload", "value": "48837592f3d1a591921ce451e549e0ea", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777066507, "uuid": "c8191194-38d5-4913-85c6-b83e26f42ff6", "comment": "Malware payload", "value": "d540aa1369ec053214da6bbbe987ed62cb901ae0de5cce7f563810877f4e3d48", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777066507, "uuid": "7ac18c57-8c8b-4542-8a34-934011dceca2", "value": "T100C4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777066507, "uuid": "32cd5709-160e-4071-aa07-103a54b9f322", "value": "12288:f+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2bylH9I1P0QKw6FE9:f+QqldA/TSO713u7xnlH9IaQKHQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777066507, "uuid": "2e6c70fd-267b-4144-b43d-995c1ea6b406", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777066507, "uuid": "76fe62f3-3cac-440f-bae4-fd1f06c3b15a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76f766b7-4025-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777066508, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777066508, "uuid": "34dfd7f8-5b30-40c2-b243-257b738eba12", "comment": "Malware payload", "value": "c730540e038525560613ae18de69cb66", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777066508, "uuid": "6d6e2414-fd75-4717-8a72-ed19fd46b414", "comment": "Malware payload", "value": "d6b824b5424d72c6cdc402834f26672aee1d80aef695c067e18c24cce0a29b07", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777066508, "uuid": "2f4a382b-0082-4910-9b7f-bda74ecd93ca", "value": "T1C3C42304340641D5835A2B1EAEC4E7E0BEB560DBFA1CF940AADD7ED06DE92A177C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777066508, "uuid": "d00e1ece-38b0-4ef0-a92c-ef60da4f113a", "value": "12288:/6wlOMWROC/FTeHo22Qm7NzofOr68mEeA924EwCa:H4MQOC/gHozN7NzomW8uA9Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777066508, "uuid": "14c7339a-9a05-4b46-b33c-b2276a076d11", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777066508, "uuid": "d74ae5a0-b48a-4c7a-98cc-1ebb945f57b0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77e0fcdc-4025-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777066509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777066509, "uuid": "b633b9be-7be3-425b-96ce-368c7c3b9d0a", "comment": "Malware payload", "value": "a4e7555bf9e73d3a42b4e0ed480ae780", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777066509, "uuid": "e5987905-bbc7-41f5-9425-43e447a2ac8f", "comment": "Malware payload", "value": "3a9f029e128ad84312dafd67b5e705a6357431c846edf45fb3903130097e712a", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777066509, "uuid": "d8bee477-b9d9-41f7-92ce-658029f6c439", "value": "T1CBB423CE5A286CAC5BE85E834F5DBFDA2CF8413F862411F3F3581A14D4C956672A81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777066509, "uuid": "602b79ff-bed7-4fb5-b74d-46b39bea3f72", "value": "12288:nGRl4nbDDGIabs/7iiEVwYg2l3/2NHky+wK8U:nTabs/7iiWw0KfxU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777066509, "uuid": "b8db071d-abed-43da-8806-25acd11ae8a2", "value": 517076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777066509, "uuid": "7d3f7f80-9372-4289-b556-e4d88781a58d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3fbde4a3-4029-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777068133, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068133, "uuid": "f7fae5e2-2b1e-4f48-b1a1-a1f7ed45ce4d", "comment": "Malware payload", "value": "8c7349a87a1767f4e27d3f06b81d0a5d", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068133, "uuid": "698f10ca-cce2-47d9-9eb2-cd8a9d51a9a9", "comment": "Malware payload", "value": "316d4d7a75374636720e820debad7573c70734d395129c0b6b318e4492c6f8ab", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068133, "uuid": "3bc38ab0-aa44-4cd9-bd58-1860cebe9703", "value": "T1C7B423F5A7606BCC9D20122F2F4A2BCE19274B41B403C54A1AD2875A421F6FF4E7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068133, "uuid": "c8369c76-d4c4-4210-bc2a-b436cdd85b53", "value": "12288:iBRdpQ73iBVYWICwvEXgbvM0a4OTHiQIIFzuK9Gd9IU3:iHUw2W59XgbM0azTHiQIouDj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777068133, "uuid": "b9f34041-6714-4003-ac75-95e7fa3a296b", "value": 542317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068133, "uuid": "d2e254cd-f15c-4c83-9162-c21573eac70a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "404dbbe5-4029-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777068134, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068134, "uuid": "a33e3cae-1bc0-47bb-896d-b4b19aac7bc7", "comment": "Malware payload", "value": "53cd26ae989ccc0602cee70dad6889e6", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068134, "uuid": "827e04c0-3c13-45db-af83-2f0fc251bfc3", "comment": "Malware payload", "value": "beeb0c003d408ad615e762c57c1088696a01fb56fea96e689db730d99f0e0231", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068134, "uuid": "fc766d99-a0c5-4499-8bde-ff7e8daafab1", "value": "T1C6C423692755F0C46206F3FC828CBCD886EF14F98B9315BAC90FA585F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068134, "uuid": "87f40bf4-db49-437e-a9b7-ab5dc2918a59", "value": "12288:YA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWDSFyorOIic/7MPm:jm6Jj6ESfUxZ91kmY/99z8uFXicTZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777068134, "uuid": "9b12d220-9fdb-452a-ab4a-d1d116a05e99", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068134, "uuid": "bd4ed63c-20c4-4598-a24e-cc6a46209024", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4094e5dd-4029-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777068134, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068134, "uuid": "83618909-b9fb-40c6-b780-c354d43334c8", "comment": "Malware payload", "value": "ba4a70bc5e9c7ec741409f26bf223b53", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068134, "uuid": "e79c3894-e6cb-4df1-adb2-fb036de8dd40", "comment": "Malware payload", "value": "d517d5882a09dd1a8e5ca97f30d19de3fa4a95e686d8a9823be2815b2396680b", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068134, "uuid": "3b5a341b-c6f5-4958-b3b3-bc839c2cc198", "value": "T17FB423CD64BED4A87B658DDA9FDCBFD30CFC003A6D7526F2A51C1A13A1C400B64A95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068134, "uuid": "93704de9-852c-4035-b653-df31109ff6c4", "value": "12288:5B/e4pqNFTFbEXkrDoGbDDGIabs/7iiEVwYg2l3/2Nyj:5Bm4pgTBoGTabs/7iiWw0Dj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777068134, "uuid": "e41b5772-be06-48c1-b3fa-0c65d7197f75", "value": 510128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068134, "uuid": "3fd36a53-27b8-4579-ab54-899695628ed5", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40ddd7fe-4029-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777068135, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068135, "uuid": "e92ee847-cf3e-4a77-a42e-68c8e0769a7a", "comment": "Malware payload", "value": "ec2139be5fbb371d772025fe545dc20d", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068135, "uuid": "08d939f9-59a3-4a03-af0f-ed82b38cca73", "comment": "Malware payload", "value": "5314b6d9317e870222d5e26747b35687c8c3c3604b894a3371e7e3115e2d1aea", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068135, "uuid": "f1a64c81-908e-439c-a119-0f9f09874d90", "value": "T117C423ED0B6E70884C7B13659B8322145E2E0F725A10B7D7A2E8D64D4E17A9C9F78F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068135, "uuid": "a2229805-ff84-45cf-bbed-ded98b688119", "value": "12288:ByBXIs7rM1TcqOqO3g/ALyYG0ZaDajTCXMO8xzDOee54:kImQ1rEA/f0Za6TCXKBxeu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777068135, "uuid": "3f399abb-e4fa-4bc2-9b78-90afeb3f6ba1", "value": 547027, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068135, "uuid": "0f517a7f-7776-4a84-b9cd-59342e836f53", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40eae160-4029-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777068135, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068135, "uuid": "9aee8f80-7c4a-43f0-9c98-0c36fed71490", "comment": "Malware payload", "value": "95f6c1bb98f4cd4e471c7b7a9bff3699", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068135, "uuid": "c1b7a1b5-657f-4b67-be36-c22197c21596", "comment": "Malware payload", "value": "a9963cf02fa38627a69e484ac52c12c80df3038be75a2f5483c9ca6a3d3f0b12", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068135, "uuid": "9132f275-a33d-4ad7-8b65-61ce1a1caca3", "value": "T195C423B7179AB4897503E3E4814C6D9489AF20D957C3436ECA1E2693F5BE247FB200", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068135, "uuid": "ed487e94-c756-4e9d-89b9-8ce0dc5d22ad", "value": "12288:DeElNtIBB2gX3U5+A7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9N3ezQ:DeSIBBfH0m6Jj6ESfUxZ91kmY/9HeU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777068135, "uuid": "7bc684dd-5662-41b4-8ed8-1ca5c4ee56e7", "value": 584435, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068135, "uuid": "8d2399c1-04c8-448a-85c0-8f0f10803c16", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40ee3b4f-4029-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777068135, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068135, "uuid": "8a78af94-a98f-45a7-ad26-18b00cc9474f", "comment": "Malware payload", "value": "5879b2899180326b53e0e44d299c52f1", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068135, "uuid": "97339fab-5adb-4f26-84d5-1facc63097b0", "comment": "Malware payload", "value": "d9f82badc8d19f8e1bd50262756397d6c0115a1fe6087b6b18cf88f8c4969c24", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068135, "uuid": "77caf456-378b-42d6-8a75-93092d8fea4a", "value": "T1AE553387413C18C44F3D066767AF996CA2259AFC20070C777766446B353F3AF8AB99", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068135, "uuid": "a3d23b49-a6ad-4a9c-a4fd-8d3bcd2c785b", "value": "24576:coZjxbq9j8XJlqrGAuImQIMESQ+hcqMXHC0Clwi6/CttWaRDMU9U:coZ9bq+MmMEL+hcjXHC/wnwdDMU2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777068135, "uuid": "6a889b4c-278c-4bbe-a906-c6e55eb25c08", "value": 1387699, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068135, "uuid": "96434472-f3e5-46ff-aa16-66e1c4c4151a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "41077056-4029-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777068135, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068135, "uuid": "0bc9646e-8a9a-4c80-ae59-4d52950c276f", "comment": "Malware payload", "value": "c54dbce9e69a1fd892d83aa69d6eaf8f", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068135, "uuid": "de5d8efb-1423-4956-9b7e-be83c9dcf6cd", "comment": "Malware payload", "value": "57667d2fc4b0648e4a0b65c74fac9ae9701f7e6b309cc027c896853a700f4a5b", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068135, "uuid": "d552cd33-c349-4f04-8969-6a69deabc944", "value": "T1BCB423F5A7506BCC9D20122F2F4A27CE29274B51B403C54A1AD2875A421FAFF4E7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068135, "uuid": "57e84913-7555-4d2d-b275-14d6eb240228", "value": "12288:EBRdpQ73iBVYWTCwvEXgbvM0a4OTHiQIIFzuK9Gd9IUU:EHUw2WO9XgbM0azTHiQIouDI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777068135, "uuid": "20aca916-60b9-4e87-a022-41115ae4a991", "value": 542317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068135, "uuid": "f2b04f92-e88e-43da-aff0-3bed753cdac2", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "415d44ca-4029-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777068135, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068135, "uuid": "72640ef3-493f-452f-afa7-30a3fe550a43", "comment": "Malware payload", "value": "fcdca6f7e937adb8b19f0c413304f07f", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068135, "uuid": "0a7cb47a-8435-478c-83e9-51fac4609c1b", "comment": "Malware payload", "value": "5fbf83ec730a0ecfecaff3dbaa3845f195c4248848b6fcc9a871e9b936ee044f", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068135, "uuid": "e5adf452-b37c-4b32-9d8c-42be9bb88c97", "value": "T1A2C4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068135, "uuid": "b0c0be21-f0fc-44fa-9a26-26cbc7140920", "value": "12288:n+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2bylH9I1P0QKw6FEN:n+QqldA/TSO713u7xnlH9IaQKHw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777068135, "uuid": "b12c66b1-57fc-4d2e-bcbd-c570e6b4b8ea", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068135, "uuid": "5f0eccd8-cd4b-4ee5-87cc-5e1ff78257b9", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "41668462-4029-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777068136, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "e786a550-2ea6-4d7f-8983-aa799102a84a", "comment": "Malware payload", "value": "1f0a9d4f4d0bab9b4591524defbc559d", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "96bf5476-d64f-4e37-a471-0ccd14f60b0e", "comment": "Malware payload", "value": "10834807dcd8b9206417f3c5602267ac0b42f11ec653c823a03b44b6f3bdf375", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068136, "uuid": "b11a6b29-95c4-47d7-977e-fabf5b704fa1", "value": "T16CB423F5A7606BCC9D20522F2F4A2BCE19274B41B403C54A1ED2875A421F6FF4E7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068136, "uuid": "c3c3a3f9-370e-485c-999a-2780b7acc33e", "value": "12288:iBRdpQ73iBVYWkCwvEXgbvM0a4OTHiQIIFzuK9Gd9IUz:iHUw2WF9XgbM0azTHiQIouDH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777068136, "uuid": "4b9fb8b7-647e-4ea5-8923-44afeb4b25b8", "value": 542317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068136, "uuid": "67016edc-bea1-4919-81f2-81ea5f305ef1", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "417586fe-4029-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777068136, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "6b6a1cc9-d220-472d-939e-1656b9f44a10", "comment": "Malware payload", "value": "05a74d727e661f8e1d282154783941e9", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "fc8c29fb-d920-4824-ab21-a6a7b286b39e", "comment": "Malware payload", "value": "74a244414812ff42041d8f1ed0699da8879d8b72c6a8b9e5cc648c8db310c0cf", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068136, "uuid": "757efe2f-78be-42fb-afc6-ebffa51d6d54", "value": "T1A0C4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068136, "uuid": "437940b6-8e9c-4d69-9ecf-159cee1b03ca", "value": "12288:n+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byAH9I1P0QKw6FEm:n+QqldA/TSO713u7xnAH9IaQKH3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777068136, "uuid": "9862f648-4595-4f81-a1e1-2cd6e325be6a", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068136, "uuid": "c2978b8b-ec6c-4387-8f15-c1d3640914b8", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4180da88-4029-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777068136, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "29dfd34a-95a6-49a8-8671-c0391e339fb1", "comment": "Malware payload", "value": "973d11f9afe169ce893052eb3b04ffb7", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "fa5a4962-2e4e-4096-a4c2-280fafeec831", "comment": "Malware payload", "value": "f4c2d1ce361689a37064d8207a2cd39bd74437d661b01c39ef9dd4e6b02cc5f1", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068136, "uuid": "39c0a68c-b3b9-4703-8561-3c92bfa0dca3", "value": "T11CB423CD64BED4A87B658DDA9FDCBFD30CFC003A6D7526F2A51C1A13A0C400B64E95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068136, "uuid": "e896f05a-8456-4bae-a93d-a20a57356a22", "value": "12288:UB/e4pqNFTFbEXkBDoGbDDGIabs/7iiEVwYg2l3/2NyY:UBm4pgTjoGTabs/7iiWw0DY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777068136, "uuid": "3bd9006a-bf2c-4bec-93f5-1d9ebe49c7c9", "value": 510128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068136, "uuid": "e64b3397-84b1-4670-b208-f51b659eb08e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "41931d83-4029-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777068136, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "d4991867-7d35-47a5-87f3-beb665be4f86", "comment": "Malware payload", "value": "4ecd78a87ff3d05e16aa01eab519529f", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "5e58b33a-83d2-479c-8246-1336d49da27c", "comment": "Malware payload", "value": "59adcbb64c7441f7f51e4360020da9d9ef2f618e956da861826cbb0724e4a104", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068136, "uuid": "362b5d65-8958-4e9f-b523-2ee606d75096", "value": "T154B423CCB6C788CC55A63134E6A20B4194DBBF33B2DF7391B5B849700DE6A6710297", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068136, "uuid": "22637eb2-61b7-488a-b120-4a7e30b69a49", "value": "12288:IwsK8MG1KnyC/G76u6M0gXar5qduTct2ien3P+bei:oKGcGmuwjLQen3PwL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777068136, "uuid": "badb1095-9dff-4934-94ea-9fae4090fa67", "value": 515391, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068136, "uuid": "1dd3e3bb-f1ee-4da5-8078-802bcb8d3f5b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "41882596-4029-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777068136, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "ff15bbd5-a1da-4b49-9497-0287adc18aef", "comment": "Malware payload", "value": "acc8a33854724e8e2646fb87689c1b55", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "0160a511-6011-4e67-87f4-25af031cb032", "comment": "Malware payload", "value": "0d6ec42a9223be1490614446e6be118ba5875a60367c0174740724f9292e3128", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068136, "uuid": "a19da362-42db-4a6c-a600-207a29184f85", "value": "T186C4238BA3FD845390BF1F58AA5BB48D091976F34722DC93146A3313D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068136, "uuid": "621e81c0-3f2c-4ef8-89fa-7bd6d4725dca", "value": "12288:7+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byKH9I1P0QKw6FEk:7+QqldA/TSO713u7xnKH9IaQKH5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777068136, "uuid": "d3d59ae6-accc-4ac2-a133-d57223251440", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068136, "uuid": "43b81c29-5e48-42a4-ae91-ad98abf32532", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "419700dd-4029-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777068136, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "b8a9e3e4-87b5-4272-b335-6ce2a1035901", "comment": "Malware payload", "value": "73cc6e734d84517aa954e90147f00832", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "18df8c13-c338-4f2f-b667-3b75bb81df47", "comment": "Malware payload", "value": "00eb8ca8ec61f58f275fc56635354a043274fa1e0ada579c15942f0fa3018979", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068136, "uuid": "1d7ea8d8-8101-42ed-8be8-ccd8aba5f33b", "value": "T15FB423F193429E0B23A4DAB457A3DB3375CE7292769D9301CA06CA9F4C7072886DC1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068136, "uuid": "3d0a0b2d-f41c-44fd-99a6-e9625198139d", "value": "12288:Bkmht7DrvdyiVCCH1oHF9nJ/qjuyPgoJrrzTPwk0:BkmHzM2H1ELnKPgoJnnw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777068136, "uuid": "d7151c80-96bd-43a1-95e4-563ba4e6d853", "value": 493748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068136, "uuid": "05d76902-f48d-4fc5-ab4b-a9948ffddc36", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "41cbd5a7-4029-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777068136, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "a3770b05-65c2-4abf-9ce3-0d13bbeb35b9", "comment": "Malware payload", "value": "96ee7376f6b1e76f0a2a7ae5f3401dce", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "c3224e7a-7747-44ff-8a30-211d73ff66f7", "comment": "Malware payload", "value": "48694f83e64497d05bda40a0153aa7fa657ac3f8f4bcf919e9b39e5901d290fb", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068136, "uuid": "67c09315-c312-48c8-b7ae-c85ba0747ff1", "value": "T1F5B423F5A7606BCC9D20122F2F4A2BCE19274B41B403C54A1ED2875A421F6FF4E7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068136, "uuid": "c62d3422-8c91-4bfe-b9b2-44aa57f18f1d", "value": "12288:CBRdpQ73iBVYWsCwvEXgbvM0a4OTHiQIIFzuK9Gd9IUr:CHUw2Wt9XgbM0azTHiQIouDf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777068136, "uuid": "0fd40c41-9e73-4cd2-9bc8-30f29f9ff4cc", "value": 542317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068136, "uuid": "f12477b8-4463-4ec1-b83e-e0f1c8d63007", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "41dd48fb-4029-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777068137, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068137, "uuid": "ae62c90a-3f80-42a7-8613-a1beea372710", "comment": "Malware payload", "value": "347ff69b8810db674dd3bcaf459d289b", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068137, "uuid": "df4e99d2-79bd-48bd-bf51-87091f3678e2", "comment": "Malware payload", "value": "716182ec93896e2ac5e293958c8b605ca7b7db84ff8abed18a486f88f17cb9f5", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068137, "uuid": "f9e23cf5-0087-40b9-baee-dc9446c57998", "value": "T1CDB423F193429E0B23A4DAB457A3DB3375CE7292769D9301CA06CA9F4C7072886DC1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068137, "uuid": "8eac8332-6a06-4fa6-884f-e4bcce0330d6", "value": "12288:Wkmht7DrvdyiuCCH1oHF9nJ/qjuypgoJrrzTPwk4:WkmHzM3H1ELnKpgoJnnE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777068137, "uuid": "c80f1bf2-8c61-4592-a54f-c08b0f176417", "value": 493748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068137, "uuid": "57d3da20-f61d-4f45-994a-5854e1df9d71", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "41e38156-4029-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777068136, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "33c8cb23-3bc5-4dd1-8269-2a106f755671", "comment": "Malware payload", "value": "2285a998ee01f7fd3d80343e36af603f", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "d847ba7c-f2b7-4307-b8ae-10eebd700591", "comment": "Malware payload", "value": "6ffc64fae55fb24049b32e4e61463a5e40e4476ec99341b7cee05808efdbfe30", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068136, "uuid": "824d5b36-8b5d-4144-8093-f8a3aa9a1631", "value": "T1FEB423F193429E0B23A4DAB457E3DB3375CE7292769D9301CA06CA9F487072886DC1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068136, "uuid": "e4ca057f-2867-49c6-b6fd-3e0efad8bdae", "value": "12288:kkmht7DrvdyiECCH1oHF9nJ/qjuyHgoJrrzTPwkq:kkmHzMpH1ELnKHgoJnn2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777068136, "uuid": "9c2ad2fd-ca66-4b35-ad77-054ffc9db466", "value": 493748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068136, "uuid": "3f9d5dff-52c8-42d4-9d91-c059db0c65c9", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "41fa2a7d-4029-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777068136, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "56e4c262-4f70-4165-af11-91d1c895da3b", "comment": "Malware payload", "value": "a2d1c79930b3fa951b8ed3ea65d4b9cb", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "6b56c340-a313-47b5-87f7-732087ac2cae", "comment": "Malware payload", "value": "155af2e5401646022cd25bf1c4e041de21adede843ae073fa57ec57d1743a2c6", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068136, "uuid": "00355c61-b9df-4703-94b6-b86286b5598d", "value": "T167C4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068136, "uuid": "788de462-3df2-400e-baa2-a02148240b55", "value": "12288:P+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byHH9I1P0QKw6FEr:P+QqldA/TSO713u7xnHH9IaQKH2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777068136, "uuid": "8a991cd5-547b-4bcc-82d3-6606897237a2", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068136, "uuid": "ec5fbca4-1b7d-4179-8fda-d7018b19ce5e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4219f07d-4029-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777068137, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068137, "uuid": "18bb4f53-8552-44d5-895d-87bb2d7ff402", "comment": "Malware payload", "value": "5ac519bd1fa921802b6beeb748bedc47", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068137, "uuid": "b703f32b-5bcb-42be-a861-88b33d35d409", "comment": "Malware payload", "value": "23d840cc08db96489547a8e8dc069ee0bf77b17293b8eff7f1d34759280e5dae", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068137, "uuid": "6b45f21b-4a3b-4ee4-97a3-943ac4ad47a8", "value": "T103C4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068137, "uuid": "caa76c59-5718-466b-8466-177fcd3b2b2f", "value": "12288:3+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byZH9I1P0QKw6FER:3+QqldA/TSO713u7xnZH9IaQKHc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777068137, "uuid": "016fbebe-d5b0-4680-8974-1958fd204986", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068137, "uuid": "e76ece73-3880-433a-9426-0961b9990c72", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4238be3d-4029-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777068137, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068137, "uuid": "088c4c8f-64d6-42fa-9300-484dbb9c7009", "comment": "Malware payload", "value": "7e926ca1d0bf73dbb48f28e3a748891b", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068137, "uuid": "af2a4968-c0ea-4cc6-806c-93ff10171d7a", "comment": "Malware payload", "value": "5a1fd94a968e41f6bca6d8ead1575d24f8874a3b0ca40d3a3b83678e1b899602", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068137, "uuid": "cedac2dd-bb17-4265-bd46-5232f2a55f7f", "value": "T135C4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068137, "uuid": "13e163f4-34b2-4bac-b394-dc44af53144a", "value": "12288:r+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2by9H9I1P0QKw6FEd:r+QqldA/TSO713u7xn9H9IaQKH0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777068137, "uuid": "0217e8e0-349a-48cd-a3d5-39f5352c8fd2", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777068137, "uuid": "a7cfd531-58ef-46e2-aa48-86205b7b3d16", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09f4db02-402c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777069331, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069331, "uuid": "4ed08c1e-9c95-4c4d-bc14-fc300b3b26b7", "comment": "Malware payload", "value": "474602fd7768c908c3602764f1e8c737", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069331, "uuid": "00afc41f-fbf4-4925-8f38-3348caff24ce", "comment": "Malware payload", "value": "226f09fe2d0dc82d89f458938fb9c9856447cf8057da47de14e59a52476a1e72", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069331, "uuid": "3b4c6608-6b23-4ca1-a991-b76555dcbe66", "value": "T1B6B423F5A7506BCC9D20522F2F4A27CE19274B41B403C54A1AD2875A421FAFF4E7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069331, "uuid": "c747a713-3def-4239-8b28-06e9733e9b16", "value": "12288:IBRdpQ73iBVYWHCwvEXgbvM0a4OTHiQIIFzuK9Gd9IUY:IHUw2Wi9XgbM0azTHiQIouD0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777069331, "uuid": "8c3287b1-6300-4c2a-a947-59bd66a6afd3", "value": 542317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069331, "uuid": "d8b39741-3c93-416c-a77e-c7b11a517514", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a163ff4-402c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777069331, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069331, "uuid": "7d67037c-a062-4213-9bd3-d6bc399bfff5", "comment": "Malware payload", "value": "e502034970f7cce730ab47ea57a4e34e", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069331, "uuid": "9d4e45d2-30e8-4082-859d-8c57a4c29bbc", "comment": "Malware payload", "value": "294349c11ee1ce3da3b3912d5cb8651a8d2173306dc9619506c0817016c091ff", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069331, "uuid": "8a02734f-589d-42fb-b389-17fd02dfa081", "value": "T1E7C423B7179AB4896503E3E4814C6D94C9AF20D957C3436ECA1E2693F5BE247FB200", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069331, "uuid": "6a1d4b60-e7bd-4991-aca9-6b360a3b21df", "value": "12288:aeElNtIBB2gX3U5PA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9N3ezQ:aeSIBBfHdm6Jj6ESfUxZ91kmY/9HeU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777069331, "uuid": "e0e4e47f-1e78-40b4-8221-e07f1f608413", "value": 584435, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069331, "uuid": "0fcb57f4-e3a7-49bd-9d4e-e8d65c1f2efb", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a6bc809-402c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777069332, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069332, "uuid": "b331ad29-2e2b-4fea-a7eb-a6532bbd7475", "comment": "Malware payload", "value": "864ea257da87dab616f27d75cd9b9cb2", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069332, "uuid": "c2d35278-5571-4e04-a627-52f9ccfa26cb", "comment": "Malware payload", "value": "608b3a488777054291fc13d8805cf22b8d16e2dfed08446e425d34407867aea2", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069332, "uuid": "c6f9dfd0-e3c7-4b8a-ba7a-ff88042f1edf", "value": "T12AB423CD64BED0A87A658DDA9FD8FFD30CFC003A6D7526F2A51C1A13A1C404B64E95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069332, "uuid": "84a7bcfa-799e-4c7a-97f3-644443cd8179", "value": "12288:GB/e4pqNFTFbEXkNDoGbDDGIabs/7iiEVwYg2l3/2Ny6:GBm4pgT3oGTabs/7iiWw0D6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777069332, "uuid": "0a371134-e4c9-4961-bd2b-0ed6281b4056", "value": 510128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069332, "uuid": "cdb0d792-1282-47ba-ab62-4ee3a2c75c4c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a799633-402c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777069332, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069332, "uuid": "b79ba3f7-b494-449c-968e-1914fd07abea", "comment": "Malware payload", "value": "33fbfae116e02f260984abe8019f47ed", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069332, "uuid": "b635e13d-12fe-410f-8ae3-e22eb0eed3f9", "comment": "Malware payload", "value": "0919e61c237ebf9746a5ef2d60452208e76408e8bfb12b0d0f9d785d0baa674d", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069332, "uuid": "db9e15b9-249a-4dad-a51d-d5c95566185c", "value": "T1C8B423CD64BED0A87B658DDA9FDCFFD30CFC003A6D7526F2A51C1A13A1C404B64A95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069332, "uuid": "aabf3f96-c01b-4b87-86ff-2176fe376066", "value": "12288:pB/e4pqNFTFbEXknDoGbDDGIabs/7iiEVwYg2l3/2Nyz:pBm4pgTFoGTabs/7iiWw0Dz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777069332, "uuid": "b13b42cf-9143-475a-bb26-b8903d9464d8", "value": 510128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069332, "uuid": "1d08e03b-dd84-456f-a536-e83a6ff7734a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0adc5889-402c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777069333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069333, "uuid": "937baec4-6989-4b69-9423-60b868bb29ea", "comment": "Malware payload", "value": "669a8baf4899e4a49e45596beb1d928f", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069333, "uuid": "aea65c3e-8460-4b22-839c-29e1b1186172", "comment": "Malware payload", "value": "7188120d493a02db0cdafe503fd77f9fe00b5bf609fcda226642d5ddd7b7be10", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069333, "uuid": "832dab7f-7a9f-41d3-88e8-3de80a556b41", "value": "T1D2C423ED0B6E70884C7B13659B8322145E2E0F725A10B7D7A2E8D64D4E17A9C9F78F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069333, "uuid": "2de334f3-fead-4003-8d61-24c5afafea06", "value": "12288:JyBXIs7rM1rcqOqO3g/ALyYG0ZaDajTCXMO8xzDOee5o:sImQ1zEA/f0Za6TCXKBxee", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777069333, "uuid": "47e42d0d-9b67-4b71-9f17-d12f750dae8e", "value": 547027, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069333, "uuid": "03c2eb1c-1d14-431f-af82-5ae78be55459", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ae30589-402c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777069333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069333, "uuid": "dfcc25f0-176c-455c-8629-79effadf8035", "comment": "Malware payload", "value": "bffbfca6e294d7cf5a00fd874c88ad14", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069333, "uuid": "06d35058-4471-48bf-9209-da1569ce1925", "comment": "Malware payload", "value": "77c26a95b2b913cc638b686f8b4294d6a706ac308bd20b6a72dfe2b736a483a6", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069333, "uuid": "6fd83436-27d5-4386-afd4-af02e54b8a43", "value": "T12DC423ED0B6E70884C7B13659B8722145E2E0F725A10B7D7A2E8D64D4E17A8C9F78F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069333, "uuid": "010778b4-e58d-4d27-96e5-d76f2d2633c2", "value": "12288:UyBXIs7rM1scqOqO3g/ALyYG0ZaDajTCXMO8xzDOee5Q:5ImQ1cEA/f0Za6TCXKBxe+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777069333, "uuid": "bff41a71-d423-472d-a43b-b63a7450c108", "value": 547027, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069333, "uuid": "90a23b9b-3bb1-4dbe-ab72-5d37f95121b2", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b1ef960-402c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777069333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069333, "uuid": "62d79002-8491-4d43-9387-03237a9ada17", "comment": "Malware payload", "value": "8178ccbf171e5e235cac1a291b6043a4", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069333, "uuid": "d4c4fe56-62c8-49f3-b1e0-018959d02bed", "comment": "Malware payload", "value": "20118069ef5b609ffae640c50df6b06778ac4f10166420cd03151c243300713f", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069333, "uuid": "6561dbb1-43ac-4150-89c6-184f8d1dd0e9", "value": "T13EC423B7179AB0897503E3E4814C6D94C9AF20D957C3436ECA1E2693F5BE247FB210", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069333, "uuid": "1ad1471e-b8b1-42d9-b9cd-4dc05776cebd", "value": "12288:UeElNtIBB2gX3U5BA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9N3ezw:UeSIBBfHzm6Jj6ESfUxZ91kmY/9Hek", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777069333, "uuid": "3e423cd2-657b-4e7b-92c3-8e01374e23ff", "value": 584435, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069333, "uuid": "4f924cb4-9d5c-4869-955f-d76cbb7a0b4f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b3efe97-402c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777069333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069333, "uuid": "65aba836-f2bd-45d4-ba35-bc7e5f8bf459", "comment": "Malware payload", "value": "2ebfac0e370576e1f971752030c17059", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069333, "uuid": "f907f20b-61ad-4475-bb92-f06719500b1f", "comment": "Malware payload", "value": "007f9052853782c99f7fadcabc249e0486b3dce691030fa9d796e3fc71734bd9", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069333, "uuid": "adb18d5b-ad8b-43e1-96f8-23ae175131f9", "value": "T153C423B7179AB4897503E3E4814C6D94C9AF20D957C3436ECA1E2693F5BE247FB200", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069333, "uuid": "7c9162c5-65e9-42d0-a4a9-61064d1438ce", "value": "12288:SeElNtIBB2gX3U5nA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9N3ezs:SeSIBBfHpm6Jj6ESfUxZ91kmY/9HeA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777069333, "uuid": "7ead76d3-8656-4d01-ba3a-2b5de5c60376", "value": 584435, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069333, "uuid": "753d75a0-217d-4ad7-838d-fb881a5925ad", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b6626b8-402c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777069333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069333, "uuid": "ab5c9d93-10fe-4d68-bd53-25f403f2e2e1", "comment": "Malware payload", "value": "3bdf581cf263a3ab1782025947d2e5ce", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069333, "uuid": "027bb51b-f717-45df-b5cf-208b9c644aa4", "comment": "Malware payload", "value": "effaf67736737b5c4cae6282b5d890dbab9c037baeccfa88ad91cfbd0146929f", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069333, "uuid": "b59c9c48-09e3-4694-847c-883aaeb897eb", "value": "T1BBC423692755F0C46206F3FC828CBCD886EF14F98B9315BAC90FA585F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069333, "uuid": "701f7204-6182-4c6d-89af-a0bdca6fc244", "value": "12288:IA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWDSFyorOIic/7MPu:Tm6Jj6ESfUxZ91kmY/99z8uFXicTd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777069333, "uuid": "583091ae-b72f-4cf2-ab41-a68d63f35f49", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069333, "uuid": "adc65015-6255-4bc3-8366-e0b8edae81a8", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0bce24ef-402c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777069334, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069334, "uuid": "3ccae881-387b-4996-843c-e362252aeb06", "comment": "Malware payload", "value": "c80066fb0fe1e7aecf3058cc86315068", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069334, "uuid": "3fac993c-0de0-485e-a851-94eea2e139b6", "comment": "Malware payload", "value": "a48d59234550a72a5b783ec9bb184d97d077069fbe5c8faae60d1287ef435a65", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069334, "uuid": "8ad6f44e-a440-41c1-852a-cb83dcb99f5c", "value": "T140C423B7179AB4897503E3E4814C6D9489AF20D957C3436ECA1E2693F5BE247FB200", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069334, "uuid": "f189703b-64c8-42ee-ba18-15bc842a6120", "value": "12288:UeElNtIBB2gX3U5ZA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9N3ez8:UeSIBBfHnm6Jj6ESfUxZ91kmY/9Hew", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777069334, "uuid": "6563f0cb-0527-46aa-9ba3-1ed568e69db6", "value": 584435, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069334, "uuid": "603488d1-d422-43cb-a37f-9a5b7bbeb0a4", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0bedcdac-402c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777069334, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069334, "uuid": "df25414a-6d46-4bf8-8b07-f5e7b0e844b7", "comment": "Malware payload", "value": "ef7f732c0c85b8de57e9d1055d34e8c9", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069334, "uuid": "02554513-6dea-4d05-a195-7f5b88a9f319", "comment": "Malware payload", "value": "b603ee6a3b2d8f526f94d36a03d0c63809a40f7ec9272790e714d4dac8d8a3bf", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069334, "uuid": "22cf2643-38d4-40f5-990e-84f03f4ed47d", "value": "T111B423F5A7506BCC9D20522F2F4A2BCE19274B41B403C54A1AD2875A421FAFF4E7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069334, "uuid": "e1f1e105-5cc9-4643-a3c3-2a5b77c0b227", "value": "12288:qBRdpQ73iBVYWWCwvEXgbvM0a4OTHiQIIFzuK9Gd9IUF:qHUw2Wn9XgbM0azTHiQIouDp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777069334, "uuid": "7a683105-8e28-461f-a1b6-90ef2135f820", "value": 542317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069334, "uuid": "0a3c7f14-4cc8-4d04-b013-b0058227fdc1", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c1a525e-402c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777069335, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069335, "uuid": "8445994f-52bf-4082-8fb4-d30969defbf1", "comment": "Malware payload", "value": "b1cf32cc17181b7afb12b6d424dcd317", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069335, "uuid": "774447fb-7d35-4ab8-b432-2fc488804495", "comment": "Malware payload", "value": "af3577c4ed453f01407ad4ffd161b867e2dad3d307b4e073d62f1e13ea205a12", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069335, "uuid": "fa142a92-9a6f-4a72-8775-a3256ab2fb04", "value": "T1C5B423CCB6CB88CC55A63134E6A20B4154DBBF33B2DF7391B5B849700DE6A6710297", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069335, "uuid": "66277f28-ef34-4b08-b2e7-57a906cd372a", "value": "12288:HwsK8MG1KnyC/G76u6M0gXar5qduRct2ien3P+ber:1KGcGmuwjJQen3PwC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777069335, "uuid": "93961fbc-7052-4c9c-a4d6-a3d7340256a9", "value": 515391, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069335, "uuid": "4d9c73bd-60fb-47d8-a17b-71890ef983bd", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c4841aa-402c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777069336, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069336, "uuid": "948f75a0-01e6-41d6-ba9f-09e3f4f5a6b5", "comment": "Malware payload", "value": "bd828f250d7a03f35aa400e988d2956a", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069336, "uuid": "c012612e-62f6-4f2c-8639-8a88ab9d3207", "comment": "Malware payload", "value": "326c07e68829cdd2bea83e4e38da4bf7cfea66714fdfc9d3b39d507df37095da", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069336, "uuid": "27621ac3-831b-4bf2-8e2b-86beb6df6fd1", "value": "T12EC423B7179AB0897503E3E4814C6D9489AF20D957C3436ECA1E2693F5BE247FB210", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069336, "uuid": "c9c67b0e-ef5c-4ec1-a853-08c3850410f7", "value": "12288:GeElNtIBB2gX3U5LA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9N3ezo:GeSIBBfHBm6Jj6ESfUxZ91kmY/9He8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777069336, "uuid": "de222785-118e-4c74-ac23-05294010ae61", "value": 584435, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069336, "uuid": "c8426294-00c0-4632-9c7b-992202a9bb96", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d3785ae-402c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777069336, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069336, "uuid": "fe51a3b6-11d3-4d7b-b61a-74de42fcf943", "comment": "Malware payload", "value": "e0ff7fd94a15494ec233280e05603dc8", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069336, "uuid": "3455d6bd-9343-458c-9248-3e8016c0d747", "comment": "Malware payload", "value": "2983814eba6c1ecf422bed9cc7be996995be0a53cf8cea6019815931a8913c13", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069336, "uuid": "ad714116-8470-4a8d-9d8d-69a2b99c022e", "value": "T1B9C423792755F0C46206F2FC828CBCD886EF14F98B9315BAC90FA585F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069336, "uuid": "95e35485-4b14-43ca-a441-0bc722c98bc8", "value": "12288:mA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWGSFyorOIic/7MPD:5m6Jj6ESfUxZ91kmY/99z8XFXicTY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777069336, "uuid": "1fb45f17-73e3-4021-aefb-9dfd30ac1a74", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069336, "uuid": "bc84ab4c-227d-462d-829f-d2046366afc0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d49b58d-402c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777069337, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069337, "uuid": "71cb30d2-4340-4939-a64c-e50b46cb1ec3", "comment": "Malware payload", "value": "13c30433b4a4d7663c63fd17013bff1d", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069337, "uuid": "b8119aea-fe3c-4449-8bbb-2a2f4d472605", "comment": "Malware payload", "value": "063fb4638ed8b0595004b455d0cb605ca27c3e5f25fc515d712aea0a21ff25a3", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069337, "uuid": "a93dfcca-621d-4061-8f56-697224ae542d", "value": "T176B423CCB6C788CC55A63134E6A20B4194DBBF33B2DF7391B5B849700DE6A6710297", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069337, "uuid": "72063a47-1f64-4d1c-ae7f-608857e1ab9b", "value": "12288:pwsK8MG1KnyC/G76u6M0gXar5qduBct2ien3P+be5:3KGcGmuwj5Qen3PwE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777069337, "uuid": "336b76fa-3ce8-4aea-bb58-7bde1062c75e", "value": 515391, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069337, "uuid": "82e76ce1-b825-4a00-97db-e72d725e7fcb", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d481218-402c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777069337, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069337, "uuid": "cfdda3da-5dc2-4c65-bf6e-814e34c478d2", "comment": "Malware payload", "value": "7fcb0b9a58a780ef69c1254a9aa1f94c", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069337, "uuid": "29c78caa-7bab-4de8-9d4c-6178da23e0ff", "comment": "Malware payload", "value": "22cd7221025bfa9709bb475f1225ed152e676beda36158bc3e3f10a5d0702c02", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069337, "uuid": "6b805008-fa66-457e-9a80-3d0ca9f63853", "value": "T1CAB423F5A7506BCC9D20522F2F4A2BCE19274F41B403C54A1AD2875A421FAFF4E7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069337, "uuid": "5c388abb-90a7-4989-bb82-0b60b39f85c5", "value": "12288:4BRdpQ73iBVYWLCwvEXgbvM0a4OTHiQIIFzuK9Gd9IU8:4HUw2Wm9XgbM0azTHiQIouDw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777069337, "uuid": "1a7f09eb-3646-46b7-b7f2-52d69e24b60f", "value": 542317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069337, "uuid": "54c9dbcc-7b1e-49ff-8ce9-e6fa3640ff58", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d715f80-402c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777069337, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069337, "uuid": "20ae8e32-bc2f-42b2-8aea-1821a1484d5a", "comment": "Malware payload", "value": "51ca6f8b5a18bb356400a6d50a40c6f4", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069337, "uuid": "d1c3709a-eed6-4b9a-9263-949c024479e6", "comment": "Malware payload", "value": "d99d96d1fe526be61df159392af7c0771a197e8d96986abc5c25fca6b5669716", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069337, "uuid": "768dee92-7c92-4338-b6ae-799921238c75", "value": "T12FC4235D7018EB38E907A174F312C0F26BAE662BE0A5C39CD045053B37AFF26689D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069337, "uuid": "7ce23553-18bb-4ff5-adac-65fb3b3ba9ba", "value": "12288:VMU+0xq75aS9iYIp6cP/G2Bku8TtNvC28c5/VTUPkYyA:h+J71vI/GtYc5/pg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777069337, "uuid": "0f00b6f6-c20a-4584-8c67-4b2d476172d3", "value": 587570, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069337, "uuid": "f3d6d030-2c79-4d33-bb7b-998a155276f8", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0dd161af-402c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777069337, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069337, "uuid": "d4b9ed4b-c1fd-4b34-a4a1-5058aa2c73c1", "comment": "Malware payload", "value": "43f21511ff8082cd718d6f454a376e62", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069337, "uuid": "cf1ec0ff-127a-4923-81e5-8319bb8c3548", "comment": "Malware payload", "value": "2b1532009dc7572237ecb6a90f3c5352eb9c248e27fd3a8bdee174640845acea", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069337, "uuid": "77283b41-4817-40bc-966d-e320f25e10df", "value": "T126C423ED0B6E70884C7B13659B8322145E2E0F725A10B7D7A2E8D64D4E17A9C9F78F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069337, "uuid": "633274e7-2a17-43b7-aa89-962532ed2dcb", "value": "12288:GyBXIs7rM1OcqOqO3g/ALyYG0ZaDajTCXMO8xzDOee50:zImQ16EA/f0Za6TCXKBxeq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777069337, "uuid": "a0314233-f97d-4e03-9566-35f8f8591bde", "value": 547027, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069337, "uuid": "ae40b9be-2d77-4f66-966e-5adbda8c3b20", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e0a4a2e-402c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777069338, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069338, "uuid": "12e53288-ff00-4c7a-9f88-4a5fbc12c95d", "comment": "Malware payload", "value": "40a72c1a9e0eca58471fd92758106331", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069338, "uuid": "a249148a-299b-4c40-82b9-5618a20c69a5", "comment": "Malware payload", "value": "9415f053ebfff85a08044cd44ff0b71944bf18deca4afef623bde716ff6a54d2", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069338, "uuid": "c438d5d5-8398-4d59-b7fc-2e5bd7e77d6a", "value": "T1ADC4235D7018EB38E907A174F312C0F26BAE662BE0A5C39CD045053B37AFF26689D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069338, "uuid": "89f6d19a-3bb3-4fb4-83cc-b1dd47f41b18", "value": "12288:lMU+0xq75aS9iYIp6cP/G2Bku8rtNvC28c5/VTUPkYyY:x+J71vI/GlYc5/p4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777069338, "uuid": "5d68a2d1-84d6-4c79-add1-5d94518e2d0e", "value": 587570, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069338, "uuid": "fe92b79e-3b53-4f22-840b-1acde3c3d819", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e3188ef-402c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777069338, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069338, "uuid": "fb58e8c4-bb52-4dd4-9e9e-30adde720bfb", "comment": "Malware payload", "value": "19bedd7dd6829c25eac299f98aa3b018", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069338, "uuid": "7ac71c2a-63e1-4067-92cc-51f1a0606a46", "comment": "Malware payload", "value": "6c25d81de8621961084a263d1fcd2165c1d28c31ae0a12d02291914e0a4e9227", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069338, "uuid": "26538a48-4ff1-4692-8e97-81fc7c9d76e7", "value": "T13AB4231AF4D078CFD68ACDA394291C785F6C96C9CD126B7247C4EE9312442F627A44", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069338, "uuid": "931b7bbb-0da2-4698-96ed-d24ed60e0575", "value": "12288:5TibgSMFBOBSlqrbKu7FxPbzJTVBU+8JM9hAC8Z3eVOBRkbKQDiUbpKc:QcSMFYpKkxpTKJM9mCw3eVOMWAPbp7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777069338, "uuid": "9c88ad6a-dd37-4cb3-9dd1-6cdeaaf85a4e", "value": 525573, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069338, "uuid": "cc173aec-0031-4da5-b934-9c22ace1bd7b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e8df50c-402c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777069339, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069339, "uuid": "60a80991-bbd9-4f2c-875e-91c56def4607", "comment": "Malware payload", "value": "bd4081621ebc5ccb88de2967352a232b", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069339, "uuid": "6487ae19-324c-4493-a971-0f065f546056", "comment": "Malware payload", "value": "ea95eb3fc6603ab906b1b89694dff119e649636f42d249fe02f1afc6f61697b4", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069339, "uuid": "dab1fb00-8447-4461-b465-188ec88cc914", "value": "T1C0C423B7179AB4897503E3E4814C6D9489AF20D957C3436ECA1E2693F5BE247FB200", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069339, "uuid": "d060da43-3166-4588-ad54-9570685b7c19", "value": "12288:JeElNtIBB2gX3U5EA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9N3ezU:JeSIBBfH6m6Jj6ESfUxZ91kmY/9He4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777069339, "uuid": "fb3f7359-19b9-4c97-9dd6-5d5b53cf9a74", "value": 584435, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069339, "uuid": "0a4d3852-4883-417f-af86-a4eebc4d577f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ab468d2-402e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777070352, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070352, "uuid": "5aac83f4-69a1-41ae-b0e0-30ca893aca5d", "comment": "Malware payload", "value": "4045bf294f09f8c0d2e0bc7fdc7f38fd", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070352, "uuid": "a41011a0-b5fa-4dd9-ae2b-dbcbb3f3c25e", "comment": "Malware payload", "value": "9595df29b7ec940b3976b66984778c0c3d946b3a28d1b124f5b8ea0456c34da9", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070352, "uuid": "bfdf769e-9f77-4e2d-8abb-34c2a42ad96e", "value": "T154C4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070352, "uuid": "adfe6180-cbd2-4cae-8763-bf25df8831f1", "value": "12288:L+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2bysH9I1P0QKw6FEO:L+QqldA/TSO713u7xnsH9IaQKHv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777070352, "uuid": "97034b7d-59c7-41a8-8eee-42d505d03fa0", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070352, "uuid": "66846e8b-ee93-449b-bfc5-39d5d739047b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ad879ee-402e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777070353, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070353, "uuid": "036d752b-8bd1-4fbb-aef1-d781c9f296f4", "comment": "Malware payload", "value": "c9db95b0afe4109a354130f9f33cda84", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070353, "uuid": "c791fe6c-3cb4-4d87-a117-e7e18ab33a94", "comment": "Malware payload", "value": "f562a288fea40c3b5c14e675f6d75867699368cd7ccbb00b4d31513d71268d3b", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070353, "uuid": "5e24067c-c538-4d17-9a33-e8e42e4cd90b", "value": "T124C4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070353, "uuid": "60eb3be4-3eb9-47a9-9f05-ecadcb0cc0cb", "value": "12288:r+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byCH9I1P0QKw6FEA:r+QqldA/TSO713u7xnCH9IaQKHp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777070353, "uuid": "c12b0e10-38c1-441d-b2ec-d314b9128818", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070353, "uuid": "ec28a264-a9a7-4b87-a7f1-87302373211d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6aefcf06-402e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777070353, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070353, "uuid": "2f35fcbf-af1f-469f-9402-0bc0f9f59635", "comment": "Malware payload", "value": "aa3fe5d4670afa85660a9441ad27541f", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070353, "uuid": "af96ef88-c686-4e2c-a81d-2c80ca51dd82", "comment": "Malware payload", "value": "534ffd3187eb58a5bffb2d13844ba6084b652fe8dc94a8d935e45f5bbf4317dd", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070353, "uuid": "3985f996-68aa-4d91-bb69-c2d1517719d2", "value": "T161C4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070353, "uuid": "bbb44ee9-bc50-4262-bd4d-bb79a8172a81", "value": "12288:z+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2by4H9I1P0QKw6FES:z+QqldA/TSO713u7xn4H9IaQKHj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777070353, "uuid": "a2c52f14-4b3f-4eb9-a90c-86c7cd098b0b", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070353, "uuid": "728449d7-44bd-4aea-8a80-e449f95e67ab", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b1ae720-402e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777070353, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070353, "uuid": "8277774d-1bd4-437e-831b-b7e702030471", "comment": "Malware payload", "value": "56d4c049e099c8d20cd11d3cb8408c6c", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070353, "uuid": "4a0507bb-a1f1-4bc2-bd92-4bd416f8c89c", "comment": "Malware payload", "value": "ab29e72b94c2c6dbfee3a63a92a6cbb1063b895c7b0c1a5d63544f81a782194c", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070353, "uuid": "f3ff4f2a-ce8f-483e-9143-d88210e589b9", "value": "T17BB423F5A7606BCC9D20522F2F4A2BCE19274B41B403C54A1ED2875A421F6FF4E7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070353, "uuid": "ee1c0201-5570-4033-9efe-5580501d2d0e", "value": "12288:tBRdpQ73iBVYWdCwvEXgbvM0a4OTHiQIIFzuK9Gd9IUN:tHUw2WY9XgbM0azTHiQIouDJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777070353, "uuid": "5556e3ec-3d85-4875-a3f2-1b8b1f15d5c6", "value": 542317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070353, "uuid": "0d0721b1-255c-4171-8637-2848fb9b3304", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b448dd9-402e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777070353, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070353, "uuid": "fc09c375-941f-41eb-8aa4-e9070e38cf50", "comment": "Malware payload", "value": "95a3701ed402bf0b006793fc0804c8ae", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070353, "uuid": "baa9affd-55af-488b-b7d1-19c59d80c23f", "comment": "Malware payload", "value": "b8b6f7de8a70b515d207159812bd0d18a3c497232533c32e10fb9560381335e8", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070353, "uuid": "e6db6654-6ea0-4102-b93f-ac52e3a5d254", "value": "T1A4B423CE5A286CAC5BE89E834F5DBFDA2CF8413F861415F3F3581A14D4C956672A81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070353, "uuid": "5f243672-9ecb-42d1-b580-4a6b8c291702", "value": "12288:NGRl4nbDDGIabs/7iiEVwYg2l3/2NH9y+wK8X:RTabs/7iiWw0KAxX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777070353, "uuid": "a6b6cd59-6664-4ea3-a88b-ca2d7b5143d7", "value": 517076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070353, "uuid": "1b9c17e5-5b57-4f82-9135-1a34534c863e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b43e008-402e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777070353, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070353, "uuid": "498dca3f-f004-41d6-a785-76c362a47f73", "comment": "Malware payload", "value": "5e8c945be0f2c9e61ca68de2bb9d8ea1", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070353, "uuid": "1696ec26-6295-499f-9923-e42f40e00d6c", "comment": "Malware payload", "value": "2e7b56db35e48687c7a1a17bcb401a6557a8ebd8cc9e022fa85a8e501c518487", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070353, "uuid": "a9e42ed3-b6a0-40d5-a522-367ad3b49d1f", "value": "T140B423F5A7506BCC9D20522F2F4A27CE193B4B41B403C54A1AD2875A421FAFF4E7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070353, "uuid": "1266a8a5-fce0-4f2f-b85e-8a4f13cf151f", "value": "12288:6BRdpQ73iBVYWuCwvEXgbvM0a4OTHiQIIFzuK9Gd9IU9:6HUw2W/9XgbM0azTHiQIouDR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777070353, "uuid": "3a7caf9f-74b5-4e27-b1c5-f407d3686bff", "value": 542317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070353, "uuid": "9ba36201-d971-4e4d-aeb8-0f57b3a1cb8d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b61ea23-402e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777070353, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070353, "uuid": "a442f4dc-8dc1-4824-81e5-6c4e2993e855", "comment": "Malware payload", "value": "c6a6176e09d16afe5dc51839c37c0c1e", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070353, "uuid": "80b1da1a-dfa2-47a1-8d6a-a213d716db8e", "comment": "Malware payload", "value": "efd014a0ed1e4483901c866d1b3878d95268a957578fff0239e65443a6e4baaf", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070353, "uuid": "dabf3d49-4077-48d6-bc45-44b9ac2e67c7", "value": "T194C4235D7018EB38E507A174F312C0F26BAE662BE0A5C39CD045053B37AFF26689D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070353, "uuid": "f3be1f06-81c9-4c0b-ac6b-155fa53cc5f7", "value": "12288:ZMU+0xq75aS9iYIp6cP/G2Bku8EtNvC28c5/VTUPkYyl:d+J71vI/GqYc5/pF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777070353, "uuid": "d8888f64-a497-4e3e-8836-a5dd8088c781", "value": 587570, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070353, "uuid": "a3bfdc3b-c782-4075-9d36-26a8b5a8fd26", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b61b9cd-402e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777070353, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070353, "uuid": "eb404eb0-7d71-4548-8811-7d2947bb1402", "comment": "Malware payload", "value": "ca0a4e4028330c2590731f83fe8a9de3", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070353, "uuid": "05ccc84b-9c6a-49ae-9449-42ce550968e7", "comment": "Malware payload", "value": "49d88c223dbf383e5bfbaf0a2b745cb27f42ee4d13acf8ba9d8c254cc14ba74f", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070353, "uuid": "50a0ebcf-5cdb-40f8-b444-1340fa2ac1a5", "value": "T1D6C42304340641D5839A2B1EAEC4F6E0BEB560DBFA1CF940AADE7ED06DE56A173C14", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070353, "uuid": "3e5ae4fe-75bf-4f78-ae9b-5b3b50931c80", "value": "12288:T6wlOMWROC/FTeHo22Qm7NzofOr68m0eA924EwCu:L4MQOC/gHozN7NzomW8aA9Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777070353, "uuid": "34a30457-3baf-454b-aedb-8cc393344ecd", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070353, "uuid": "da70f718-b8e6-4286-a13f-de49238738f4", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b77a5ad-402e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777070354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070354, "uuid": "cd59c9b2-7037-4273-84e1-08e6ee7ae203", "comment": "Malware payload", "value": "3208fd5de2c2d9082c3ec03b16b0d0c5", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070354, "uuid": "fd7bb53e-49ad-4db4-9c2d-f6938dab58c1", "comment": "Malware payload", "value": "54482b81c608d6a9fd1e8b47c0c6a6d04573170c04c962a41c17177a8a076d64", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070354, "uuid": "cd77fd81-f990-4f88-b63a-652a981076d5", "value": "T17FB423F5A7506BCC9D20522F2F4A2BCE19274B41B403C54A1AD2875A421FAFF4E7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070354, "uuid": "8d59f2e8-24eb-4b67-b690-80c3bcc2a71c", "value": "12288:IBRdpQ73iBVYWfCwvEXgbvM0a4OTHiQIIFzuK9Gd9IUQ:IHUw2W69XgbM0azTHiQIouDc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777070354, "uuid": "36d4ebc8-eb5e-4791-9911-830770ef3b90", "value": 542317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070354, "uuid": "4ef96e58-f430-406f-bdb5-b1697edb569e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b81583b-402e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777070355, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070355, "uuid": "1adc2d64-2d27-401a-aa7e-8b4adc8bbefc", "comment": "Malware payload", "value": "dbb7e1a2883490560e09f191c3c0c7f9", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070355, "uuid": "66d2be97-39b8-4bbd-87c3-785fd9c0fe9a", "comment": "Malware payload", "value": "0fae6d8c7fd26efd77638340f1904fd22d7450ad735c2f88e40cb54acec8e2ef", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070355, "uuid": "18fd35a3-c6f4-4194-a6a5-ec99fadc94f2", "value": "T12DC4235D7018EB38E907A174F312C0F26BAE662BE0A5C39CD045053B37AFF26689D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070355, "uuid": "19bcb07b-5e83-422a-ac45-1eade7112ad7", "value": "12288:ZMU+0xq75aS9iYIp6cP/G2Bku8BtNvC28c5/VTUPkYyG:d+J71vI/GjYc5/pm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777070355, "uuid": "2e94d538-9ac2-450d-a330-6e78a66077eb", "value": 587570, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070355, "uuid": "5fb17cd5-84ee-4445-b015-86a92b67c2c7", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b8fa35a-402e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777070354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070354, "uuid": "4571b01a-cf45-490d-b1f4-23ba8fbbadc3", "comment": "Malware payload", "value": "11703308ec8de38f5f427b1f7a469560", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070354, "uuid": "f55c166a-156b-4520-8f64-948ca96b82dc", "comment": "Malware payload", "value": "3824469afb0692f79568fb75a292179caee3c6b1303e4669b2fb5f61904d5743", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070354, "uuid": "b158ec3a-465c-418b-b855-95338557f898", "value": "T1C2C4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070354, "uuid": "fb3eb320-7007-4dc2-9b02-da160219bde8", "value": "12288:b+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2bynH9I1P0QKw6FED:b+QqldA/TSO713u7xnnH9IaQKHi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777070354, "uuid": "fef50b8c-2d63-4a41-8197-6923f59e0c9b", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070354, "uuid": "c77cfd99-e89c-431d-8a07-3e32622973da", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6bbfeba6-402e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777070354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070354, "uuid": "c5296b67-23a9-4299-9f3a-f9b13bac5bcb", "comment": "Malware payload", "value": "3492666e3b9b0e8aee2b195a6d4a891f", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070354, "uuid": "578ea784-7234-43ed-a1a4-91b2da045dbe", "comment": "Malware payload", "value": "21d8274f1bab1fb1b50786cbb5d54d3cbe599bf96a35db2aa415c334efab2f53", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070354, "uuid": "66dbe042-b6b2-4dc1-8211-e896ca1bdbb0", "value": "T10EB423CE5A286CAC5BE89E834F5DBFDA2CF8413F862411F3F3581A14D4C956672A81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070354, "uuid": "c8f52ac0-fe98-4981-9610-abda68925e04", "value": "12288:rGRl4nbDDGIabs/7iiEVwYg2l3/2NHwy+wK8c:TTabs/7iiWw0Kbxc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777070354, "uuid": "165f4832-e0f3-4e11-9d2d-a9203caeae8d", "value": 517076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070354, "uuid": "f1b7ad08-a88e-4f4f-8b55-78a94e69cc53", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c3395f1-402e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777070355, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070355, "uuid": "4d8ca210-847e-496d-8b87-055e4805d493", "comment": "Malware payload", "value": "58786e934cb41ac86fc88f9295132f5e", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070355, "uuid": "53e53bf3-2632-4b5a-a022-aa3aa8738afa", "comment": "Malware payload", "value": "199003e112b0113a7c7d8a8d703cfdab7f1875da76a14e565b8e57a825cb99db", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070355, "uuid": "bbdc2f31-415d-430d-9458-df8d52f63cbb", "value": "T1CCB423F5A7606BCC9D20522F2F4A27CE19274B41B403C54A1AD2875A421FAFF4E7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070355, "uuid": "2ff7f5d0-e10a-402c-aa4a-d0864f10453f", "value": "12288:yBRdpQ73iBVYWYCwvEXgbvM0a4OTHiQIIFzuK9Gd9IUX:yHUw2Wp9XgbM0azTHiQIouDz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777070355, "uuid": "1d497e6f-98e9-4ea3-aa29-a469247836a7", "value": 542317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070355, "uuid": "c0b57230-6708-4609-918b-bb38ca49484b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c81b529-402e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777070355, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070355, "uuid": "8ad7bac6-68e8-43c7-aa80-1aa0d89d4d5f", "comment": "Malware payload", "value": "3bd2f8418309b8ff642d376ffcc2392e", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070355, "uuid": "0e628dc8-bddd-4e78-ad2a-8366368125b7", "comment": "Malware payload", "value": "2cc75308d70be0a1c9c5399b3118a6fcba48bdda2f360eb69d522fb5788bab45", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070355, "uuid": "b75c3f83-0ae0-42f9-8456-3e05f95bde8d", "value": "T11EC42304340641D5835A2B1EAEC4E6E0BEB560DBFA1CF940AADD7FD06DE92A177C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070355, "uuid": "9cd9bc95-10d4-4141-b474-68028b67e8f8", "value": "12288:j6wlOMWROC/FTeHo22Qm7NzofOr68mzeA924EwCN:b4MQOC/gHozN7NzomW8tA9y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777070355, "uuid": "e3df89a8-027e-4587-bf4c-651c7bb61754", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070355, "uuid": "0e13d506-cc1b-4a72-b404-dfeaa4d353fc", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6cbad0ad-402e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777070356, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070356, "uuid": "f31a9ef1-c46f-441d-b0de-9871bdaadd64", "comment": "Malware payload", "value": "b8f264fffc6f2f42041662715f331c24", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070356, "uuid": "a044934e-5a38-4885-8717-18868f31160a", "comment": "Malware payload", "value": "2d183ce367ddccc513d1475002b3dd1370b6ef28227e0c4ab1924fef1d293309", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070356, "uuid": "e6860bd9-81fa-43c3-8841-8db87e1bcaef", "value": "T1C3C42304340641D5839A2B1EAEC4E7E0BEB560DBFA1CF940AADE7ED06DE52A173C15", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070356, "uuid": "21ad0b47-d6d7-4c2b-8219-a29f92ef7235", "value": "12288:H6wlOMWROC/FTeHo22Qm7NzofOr68m6eA924EwCq:f4MQOC/gHozN7NzomW8UA95", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777070356, "uuid": "677754be-a10d-49f0-9fe8-374cc75a0597", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070356, "uuid": "fb085b49-544f-46b9-9dda-d622c78ebdaf", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ccf8236-402e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777070356, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070356, "uuid": "d39d65eb-ed78-4fb7-8bc0-79a989718487", "comment": "Malware payload", "value": "5e649c5f8cc71a00a0aa7d1f883c8bf8", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070356, "uuid": "7657fbb6-e5a7-4f68-8d07-7cc915d33b7e", "comment": "Malware payload", "value": "714de7e29081ffa337dffeede34f9d32dbc781d908c4824443ff1c29bc43f96e", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070356, "uuid": "73b7da1a-00d7-42b8-9d97-4762af81c273", "value": "T1FCB423F5A7506BCC9D20522F2F4A27CE192B4B41B403C54A1AD2875A421FAFF4E7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070356, "uuid": "ebdbd4f1-332f-43a4-b2b9-1fafdfb39184", "value": "12288:qBRdpQ73iBVYW2CwvEXgbvM0a4OTHiQIIFzuK9Gd9IUl:qHUw2WH9XgbM0azTHiQIouDJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777070356, "uuid": "1d28c1b5-f033-4ff8-80a3-b2913a39fe7a", "value": 542317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070356, "uuid": "e86a11e1-618d-4bda-b3ef-53311cf6236b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6cd4c5b6-402e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777070356, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070356, "uuid": "77d2cf04-c2a0-482c-85ba-96e0ca1d7f15", "comment": "Malware payload", "value": "1c77fcb5c584a52189e8e864eda0f1f9", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070356, "uuid": "b1c94aa5-0472-42f7-8101-46889c44eddd", "comment": "Malware payload", "value": "0adb2eaedae522cacf4d5420e87b95e33ce7c3327bd9ff748b60a4c840ceb1bc", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070356, "uuid": "189c9bbb-4b44-4d42-b159-bad16b48d011", "value": "T14BC4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7525", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070356, "uuid": "2cc40b36-5722-40aa-8649-ea2d70be0bc3", "value": "12288:r+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2bywH9I1P0QKw6FES:r+QqldA/TSO713u7xnwH9IaQKHj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777070356, "uuid": "1eb4b04b-5a91-40de-ae96-3b94fb80901a", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070356, "uuid": "641baa09-b5f4-4a3c-b2b3-9bfb292ffa97", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6cddd5fa-402e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777070356, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070356, "uuid": "1663ae10-8e72-43d2-b778-985f210cfdc5", "comment": "Malware payload", "value": "b300feef3b6336d40f18f9f21c64ea36", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070356, "uuid": "55907292-8453-4cc5-82bd-e51cbcc5a02e", "comment": "Malware payload", "value": "339234385b40d0cf35526168f2f76ac6ee7b3ece776542ab8fa3ab153a074c44", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070356, "uuid": "4dff4958-0fc8-4e27-b8ad-6d1c402e0eeb", "value": "T110C4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070356, "uuid": "af0429bd-36a5-4088-8ecf-05c7720bba2c", "value": "12288:X+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byDH9I1P0QKw6FE7:X+QqldA/TSO713u7xnDH9IaQKHq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777070356, "uuid": "589c595b-9061-4711-aea1-9d12848715b3", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070356, "uuid": "1f1a79f2-334d-44ed-83c0-99166724ac58", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6cea697a-402e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777070356, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070356, "uuid": "1792b5e5-72c3-4a48-a36a-6fcd4f4b3b77", "comment": "Malware payload", "value": "b610bd02805ba52faacae3b9ea5e998c", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070356, "uuid": "8c9b9e6e-cc64-4bb6-9f67-2ff1c6cec981", "comment": "Malware payload", "value": "e598760bfc974a2e977f603229b6f443624b5d49be8c3d60987bed017adf497c", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070356, "uuid": "eb487b27-4309-4cad-9f4c-6ecd0fbd9d9f", "value": "T169B423F5A7606BCC9D20522F2F4A2BCE19274B41B403C54A1ED2875A421F6FF4E7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070356, "uuid": "43170000-3ef1-421a-bc0b-e4652ce874a7", "value": "12288:0BRdpQ73iBVYW7CwvEXgbvM0a4OTHiQIIFzuK9Gd9IUU:0HUw2W29XgbM0azTHiQIouDo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777070356, "uuid": "58b65987-e9f8-4a57-8dd8-294342a323ea", "value": 542317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070356, "uuid": "33804b68-623f-48ae-a266-ee10cab69a74", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6cf51396-402e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777070356, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070356, "uuid": "9f7882d0-78cc-4edf-a669-9be8a2872485", "comment": "Malware payload", "value": "f4a71b8f2ac6c57575ca92e9b5aacde4", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070356, "uuid": "769315f3-8032-45c0-93c9-2be1d61cd06b", "comment": "Malware payload", "value": "7fba9a1588dc56fb13e0ead595b87ddc12702b8c412cf246c743402c58b3ea60", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070356, "uuid": "111fa6b2-5f0f-456f-a991-dbd38e0cd79b", "value": "T1C2C4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070356, "uuid": "a938746d-7ee0-44ff-bd0e-75eb24250f5d", "value": "12288:P+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byzH9I1P0QKw6FEj:P+QqldA/TSO713u7xnzH9IaQKHy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777070356, "uuid": "fd564bcb-4015-41bf-8865-052865be10c2", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070356, "uuid": "c4a1a128-bb9c-494c-b9af-d4133f6a9320", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "832f4e81-4038-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777074688, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777074688, "uuid": "4323a673-f61e-4cb9-a578-2834caeb241b", "comment": "Malware payload", "value": "b0ece743886ab87d34ccd0f1d857c748", "object_relation": "md5", "Tag": [ { "name": "pw-4475", "colour": "#aee191", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777074688, "uuid": "6da8e6db-8987-4771-a6e5-cd8f4c93ee7d", "comment": "Malware payload", "value": "3c38d62d04df7b501eef6f9ae8da83079658c7a49f5f36e0f3395a1182d3bfb0", "object_relation": "sha256", "Tag": [ { "name": "pw-4475", "colour": "#aee191", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777074688, "uuid": "f4442006-6768-4c75-92d0-55309cd75330", "value": "T1A0E633C05B8D76A1DDF8C4969E0A7A9A08D5CA0EDC132C10B3319A7A4E4678FCF3D5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777074688, "uuid": "6fd716d5-48a8-4653-996a-0f77cc6712b3", "value": "393216:/wQTgSMD/8cyI55P0Jl484YtZsCJxGFdj:ASdg5cl4893NJxm9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777074688, "uuid": "9157e1ab-f0ea-4213-8780-7eb0837b501b", "value": 14704270, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777074688, "uuid": "1c898ddb-20c4-4fcc-85e1-88c4401fa4e8", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776988866, "uuid": "b12aa8c6-3f70-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.68.239:48667/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776988934, "uuid": "d9b7ce20-3f70-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://boo5-scope.light-parcel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776989108, "uuid": "411b0588-3f71-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-zeit-3.ma8nemezzan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776989288, "uuid": "ac635b52-3f71-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.228.37:35532/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776989528, "uuid": "3bade911-3f72-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://noir-7.ma8nemezzan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776989828, "uuid": "ee917887-3f72-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.7.92:43592/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776989832, "uuid": "f118de09-3f72-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bleu-land-1v.ma8nemezzan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776989953, "uuid": "38bcbb3a-3f73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.116.226:43631/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776989956, "uuid": "3ab861ab-3f73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.55.64.75:43048/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776990126, "uuid": "a0618d2b-3f73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.7.92:43592/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776990192, "uuid": "c7b39add-3f73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://holz-5.ma8nemezzan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776990608, "uuid": "bf8d38a8-3f74-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dark-star-9k.ma8nemezzan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776991087, "uuid": "dce61610-3f75-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vert-2.ma8nemezzan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776991155, "uuid": "05a1281f-3f76-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.144.91:48149/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776991215, "uuid": "29720e2c-3f76-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.0.110:40737/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776991268, "uuid": "488ae6a7-3f76-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.228.37:35532/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776991391, "uuid": "9260813a-3f76-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soft-4z.accustom-unrecog.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776991988, "uuid": "f5c3834e-3f77-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rouge-3.accustom-unrecog.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776992229, "uuid": "85a4ac6f-3f78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kalt-berg-6.accustom-unrecog.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776992412, "uuid": "f2952365-3f78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://baum-w1.accustom-unrecog.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776992414, "uuid": "f40fcab8-3f78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.41.20:51635/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776992669, "uuid": "8bff6cb0-3f79-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.250.27.54:44991/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776992712, "uuid": "a5b37834-3f79-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.144.91:48149/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776992827, "uuid": "ea165930-3f79-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.82.197:52798/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776993016, "uuid": "5a669751-3f7a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.249.197:52976/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776993127, "uuid": "9c958bbf-3f7a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://open-petit-8.accustom-unrecog.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776993130, "uuid": "9e6dad9c-3f7a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.65.215.0:36845/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776993247, "uuid": "e457015c-3f7a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.249.197:52976/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776993248, "uuid": "e4e582b6-3f7a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.229.35.144:33006/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776993609, "uuid": "bc5a1ba4-3f7b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wind-5.accustom-unrecog.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776993787, "uuid": "264d1f2d-3f7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gold-mond-2m.there5econd.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776993855, "uuid": "4eb2d320-3f7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.41.20:51635/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776994212, "uuid": "237ab9bd-3f7d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://haus-9.there5econd.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776994508, "uuid": "d40b305f-3f7d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cold-fire-4.there5econd.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776994811, "uuid": "88d1358a-3f7e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://noir-3x.there5econd.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776994867, "uuid": "a9c7354e-3f7e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.65.215.0:36845/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776994994, "uuid": "f5610e72-3f7e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.118.0:59413/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776995168, "uuid": "5d3a3a28-3f7f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wald-petit-7.there5econd.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776995467, "uuid": "0fda202a-3f80-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-1.there5econd.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776995528, "uuid": "3407c5b2-3f80-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.73.91:34482/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776995890, "uuid": "0b7e0bd8-3f81-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bleu-holz-5c.after-coordinat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776996127, "uuid": "990d5fbd-3f81-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.149.107.50:41735/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776996127, "uuid": "99168b47-3f81-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zeit-8.after-coordinat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776996726, "uuid": "fdc93915-3f82-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.21.172:42425/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776996793, "uuid": "25fefce8-3f83-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dark-land-3.after-coordinat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776996967, "uuid": "8db9879f-3f83-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://berg-4k.after-coordinat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776997509, "uuid": "d0ee4f51-3f84-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rouge-star-1.after-coordinat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776997689, "uuid": "3bc3e141-3f85-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://open-6.after-coordinat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776997930, "uuid": "cbe7a9a2-3f85-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://iron-9v.melting-torrent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776998286, "uuid": "a0173393-3f86-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vert-2.melting-torrent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776998711, "uuid": "9d5ffa85-3f87-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://petit-wind-5.melting-torrent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776998826, "uuid": "e1f47b9c-3f87-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.21.172:42425/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776999008, "uuid": "4e562e48-3f88-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gold-4m.melting-torrent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776999310, "uuid": "02246663-3f89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kalt-mond-8.melting-torrent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776999848, "uuid": "42a61772-3f8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.142.234:37815/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776999969, "uuid": "8ab036e4-3f8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://haus-1.melting-torrent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777000209, "uuid": "19c23d67-3f8b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://noir-zeit-3s.godn2strich.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777000328, "uuid": "60cb2400-3f8b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.236.101:52901/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777000447, "uuid": "a81e44bd-3f8b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-9.godn2strich.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777000513, "uuid": "cef13464-3f8b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.24.153:52631/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777000574, "uuid": "f3a155b3-3f8b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.128.247:60163/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777000867, "uuid": "a2535304-3f8c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://holz-baum-4.godn2strich.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777000926, "uuid": "c5a6fdd5-3f8c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.178.77:51048/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777001227, "uuid": "788c47e3-3f8d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.146.205:36211/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777001293, "uuid": "a02d9e5c-3f8d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.128.247:60163/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777001468, "uuid": "08b5d2b9-3f8e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bleu-2x.godn2strich.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777001772, "uuid": "bdb455b8-3f8e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dark-open-5.godn2strich.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777002126, "uuid": "90eb7811-3f8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.236.101:52901/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777002127, "uuid": "911c2d39-3f8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.70.159:41876/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777002128, "uuid": "9193d935-3f8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.136.2:37250/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777002194, "uuid": "b965a319-3f8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.119.180.142:48407/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777002372, "uuid": "2347e19f-3f90-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://land-1.godn2strich.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777002435, "uuid": "48ed41b6-3f90-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.89.47:48213/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777002495, "uuid": "6c76004f-3f90-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.88.69.22:49017/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777002727, "uuid": "f6a5d89d-3f90-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.146.205:36211/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777002727, "uuid": "f71a7bb0-3f90-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.212.153:52150/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777003147, "uuid": "f10701b7-3f91-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cold-9q.geor8eharvest.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777003329, "uuid": "5dfb6543-3f92-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vert-4.geor8eharvest.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777003640, "uuid": "16fbde44-3f93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.84.112:42771/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777003928, "uuid": "c27f729b-3f93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.119.180.142:48407/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777003931, "uuid": "c45a68a0-3f93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soft-wald-2.geor8eharvest.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777004113, "uuid": "313b3241-3f94-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rouge-7v.geor8eharvest.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777004414, "uuid": "e45af06a-3f94-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://petit-berg-1.geor8eharvest.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777004711, "uuid": "954a370f-3f95-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://haus-5.geor8eharvest.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777004833, "uuid": "de55af19-3f95-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.84.112:42771/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777005068, "uuid": "6a0cd31b-3f96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blue-holz-8.jazz-password.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777005195, "uuid": "b5eb5b3e-3f96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.151.248.151:37348/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777005431, "uuid": "42c2816b-3f97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zeit-4k.jazz-password.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777005493, "uuid": "678bed0f-3f97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.21.247:42251/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777005727, "uuid": "f31154eb-3f97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dark-star-6.jazz-password.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777005914, "uuid": "62a64317-3f98-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.151.248.151:37348/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777006092, "uuid": "cca42ad5-3f98-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-3v.jazz-password.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777006454, "uuid": "a4146d89-3f99-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://noir-land-5.jazz-password.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777006576, "uuid": "ed452781-3f99-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.29.31.51:35994/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777006576, "uuid": "ed4f0d77-3f99-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.29.31.51:35994/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777006749, "uuid": "5400a891-3f9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gold-2.jazz-password.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777006758, "uuid": "594e4166-3f9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.49.196:36115/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777006776, "uuid": "64849d8f-3f9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.229.184.11:40838/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777006872, "uuid": "9db21fac-3f9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://use-claude.com/install.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777006928, "uuid": "be9bd82d-3f9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://132.243.164.24/new.php?type=mips", "Tag": [ { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "Xorddos", "colour": "#d055b7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777007053, "uuid": "09a232f5-3f9b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wind-3p.dometo1ochy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777007411, "uuid": "dec944c5-3f9b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bleu-7.dometo1ochy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777007604, "uuid": "51b1e6f9-3f9c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.140.189.76:60327/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777007660, "uuid": "73309d14-3f9c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.193.235:60920/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777008133, "uuid": "8d01f03f-3f9d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://open-haus-4.dometo1ochy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777008202, "uuid": "b6317812-3f9d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.229.184.11:40838/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777008249, "uuid": "d240111e-3f9d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kalt-9.dometo1ochy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777008323, "uuid": "fe96d992-3f9d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.49.196:36115/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777008428, "uuid": "3caf9668-3f9e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.183.26.44:32941/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777008674, "uuid": "cfaccdc3-3f9e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.42.7:33574/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777008852, "uuid": "39ed5979-3f9f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://petit-mond-1.dometo1ochy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777008968, "uuid": "7ea2721c-3f9f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://berg-5x.dometo1ochy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777009273, "uuid": "34d038d5-3fa0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://iron-zeit-8.inject-mitroph.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777009342, "uuid": "5dfee5ea-3fa0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.117.52:36698/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777009573, "uuid": "e74403df-3fa0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rouge-4.inject-mitroph.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777009640, "uuid": "0f8f8f5d-3fa1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.193.235:60920/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777010062, "uuid": "0ab8fd3b-3fa2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.42.7:33574/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777010174, "uuid": "4da8c556-3fa2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wald-baum-6w.inject-mitroph.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777010361, "uuid": "bce6635c-3fa2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.192.42:40019/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777010366, "uuid": "bfcd25d8-3fa2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.132.17.242:43920/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777010714, "uuid": "8f773896-3fa3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soft-1.inject-mitroph.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777010828, "uuid": "d396244c-3fa3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.124.22:32938/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777010836, "uuid": "d843c40d-3fa3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.192.42:40019/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777011247, "uuid": "cd1792b8-3fa4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://noir-land-3.inject-mitroph.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777011325, "uuid": "fb95f293-3fa4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.197.89:42176/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777011728, "uuid": "ebe0d10b-3fa5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-7k.inject-mitroph.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777011972, "uuid": "7d2867ce-3fa6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sku4jn.1zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777012027, "uuid": "9e15378a-3fa6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.81.12:53154/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777012329, "uuid": "523fb17b-3fa7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://p1a5-watch.1zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777012690, "uuid": "292da293-3fa8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://balcg.1zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777012747, "uuid": "4b47a419-3fa8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.55.93/bin/support.client.exe", "Tag": [ { "name": "178-16-55-93", "colour": "#afd33a", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777012747, "uuid": "4b4d05f5-3fa8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://178.16.55.86/bin/support.client.exe", "Tag": [ { "name": "178-16-55-86", "colour": "#131115", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777012747, "uuid": "4b80dab2-3fa8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://178.16.54.224/bin/support.client.exe", "Tag": [ { "name": "178-16-54-224", "colour": "#41e68c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777012747, "uuid": "4b832100-3fa8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/oPvjr94jfe/Plugins/vnc.exe", "Tag": [ { "name": "91-92-242-236", "colour": "#ce3199", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "tinynuke", "colour": "#6e0287", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777012808, "uuid": "6f9c26c9-3fa8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://178.16.53.72/bin/support.client.exe", "Tag": [ { "name": "178-16-53-72", "colour": "#d4d36f", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777012808, "uuid": "6fc5cd67-3fa8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://178.16.54.33/bin/support.client.exe", "Tag": [ { "name": "178-16-54-33", "colour": "#ba1824", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777012808, "uuid": "6fdb5d12-3fa8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://158.94.210.6/bin/support.client.exe", "Tag": [ { "name": "158-94-210-6", "colour": "#871697", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777012885, "uuid": "9d663970-3fa8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.3.1:49107/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777012986, "uuid": "d9f1476f-3fa8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://91.92.243.181/bin/support.client.exe", "Tag": [ { "name": "91-92-243-181", "colour": "#043a69", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777013047, "uuid": "fdce8e01-3fa8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://alt-f1eet.1zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777013058, "uuid": "048fa0d7-3fa9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.197.89:42176/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777013377, "uuid": "c2fdac5d-3fa9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.249.199.4:35727/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777013484, "uuid": "02d64b74-3faa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.116.176:39967/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777013588, "uuid": "40c41a45-3faa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://c4st-layer.1zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777013659, "uuid": "6ae07616-3faa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.47.124:37365/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777013769, "uuid": "acaae7ac-3faa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://azure-sharp.1zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777014129, "uuid": "82d59115-3fab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ark-forgeon.ra6ximel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777014370, "uuid": "12deff58-3fac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.47.124:37365/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777014487, "uuid": "586680d6-3fac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sunauth.ra6ximel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777014787, "uuid": "0b4e4fe0-3fad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://velcrestar5.ra6ximel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777014980, "uuid": "7e0b339b-3fad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.26.202:39317/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777015098, "uuid": "c4b8ef6a-3fad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.116.176:39967/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777015209, "uuid": "069b5ef8-3fae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://b4nd-signal.ra6ximel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777015220, "uuid": "0d42a56c-3fae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.2.23:49916/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777015509, "uuid": "b942f151-3fae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://jakej.ra6ximel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777015626, "uuid": "ff6965d0-3fae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.124.22:32938/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777015872, "uuid": "91bbc8b3-3faf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://5pru4-mark.ra6ximel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777016018, "uuid": "e93856fd-3faf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.102.197:53438/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777016168, "uuid": "4235f8b7-3fb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://adapt1-line.sylov4en.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777016178, "uuid": "487c7eb4-3fb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.108.107/bins.sh", "Tag": [ { "name": "45-131-108-107", "colour": "#4f4c84", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777016227, "uuid": "655d9706-3fb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.36.59:46902/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777016238, "uuid": "6c51021e-3fb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.92.57:33007/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777016298, "uuid": "8f894b41-3fb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.92.57:33007/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777016530, "uuid": "1a153970-3fb1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lgjov.sylov4en.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777016537, "uuid": "1e826bc9-3fb1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.206.205.54:60108/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777016835, "uuid": "cff85423-3fb1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.102.197:53438/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777016891, "uuid": "f113ac61-3fb1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hublistener.sylov4en.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777017067, "uuid": "5a51c774-3fb2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.206.205.54:60108/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777017188, "uuid": "a2162daf-3fb2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://clucrawl.sylov4en.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777017316, "uuid": "ee9d219a-3fb2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.224.13.224:50631/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777017619, "uuid": "a2f80f30-3fb3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://measu8-drive.sylov4en.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777018030, "uuid": "97f7a997-3fb4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.26.82:38224/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777018149, "uuid": "df1914a5-3fb4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://triggerdispatch.sylov4en.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777018329, "uuid": "4a78806a-3fb5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl52qlla.to9varil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777018687, "uuid": "1fdcccf2-3fb6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://processlis.to9varil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777018938, "uuid": "b55b2cd4-3fb6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.24.97:52088/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777018940, "uuid": "b675c85f-3fb6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.72.98.65:35286/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777019047, "uuid": "f65bfe96-3fb6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://p4rse-forge.to9varil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777019170, "uuid": "3fe2c0ff-3fb7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.26.82:38224/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777019228, "uuid": "6261cf9c-3fb7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.244.164:39627/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777019287, "uuid": "8590a3ef-3fb7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.194.60:53868/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777019564, "uuid": "2a8a4abe-3fb8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.238.24.131:58597/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777019659, "uuid": "62f52464-3fb8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.220.194:60093/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777019770, "uuid": "a5596f81-3fb8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://qc3zfzu.to9varil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777020015, "uuid": "3738769e-3fb9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.33.124:43930/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777020128, "uuid": "7a79366e-3fb9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rs9y.to9varil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777020135, "uuid": "7f0251d5-3fb9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.42.22:47025/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777020427, "uuid": "2d2a13a3-3fba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.72.98.65:35286/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777020428, "uuid": "2d7d722a-3fba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vinecarg.to9varil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777020435, "uuid": "31ab2a25-3fba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.42.22:47025/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777020492, "uuid": "53ca5779-3fba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.245.177:37422/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777020613, "uuid": "9bc7ec46-3fba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.254.225:45761/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777020678, "uuid": "c281d393-3fba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.215.173.87:38020/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777020726, "uuid": "def64bf4-3fba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.1.39:52936/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777020789, "uuid": "04a38e6a-3fbb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mossbra.kymle2rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777021027, "uuid": "928e295b-3fbb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.244.164:39627/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777021147, "uuid": "da26ce23-3fbb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rjhmik2i.kymle2rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777021328, "uuid": "46187b9f-3fbc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.1.39:52936/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777021328, "uuid": "4638675a-3fbc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.72.25:33741/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777021337, "uuid": "4b64bac6-3fbc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.55.10:48752/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777021519, "uuid": "b7b22b4d-3fbc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.33.124:43930/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777021809, "uuid": "64d15d16-3fbd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lw92.kymle2rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777021927, "uuid": "aabe3260-3fbd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.174.15:59692/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777022112, "uuid": "19792ea7-3fbe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dynforgeal.kymle2rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777022122, "uuid": "1eec50ba-3fbe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.24.97:52088/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777022123, "uuid": "1f8ce8da-3fbe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.237.248:45844/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777022228, "uuid": "5e75a628-3fbe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.157.223:57475/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777022526, "uuid": "104003f9-3fbf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.9.35.137:47771/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777022649, "uuid": "5954dec5-3fbf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ajvo1s.po7vaxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777022783, "uuid": "a945f801-3fbf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.166.36.82:60231/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777022827, "uuid": "c3400c5e-3fbf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.9.35.137:47771/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777022836, "uuid": "c8d2a914-3fbf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/jewn.sh", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777022837, "uuid": "c97bb181-3fbf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.50/arm7", "Tag": [ { "name": "176-65-139-50", "colour": "#7ad663", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777023009, "uuid": "2ff248fe-3fc0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tricoreos5.po7vaxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777023019, "uuid": "35c267d9-3fc0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.47/ohshit.sh", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777023250, "uuid": "bf5a07b4-3fc0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://loadermin.wi3sorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777023312, "uuid": "e44e7bf9-3fc0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.dropbox.com/scl/fi/80pb46ul2nj1avw5hzabr/img_070420.png?rlkey=f48psv1go7b2s1nsytfjr9nld&st=z8hkxjy9&dl=1", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777023428, "uuid": "29b30e13-3fc1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://st80et3.wi3sorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777023562, "uuid": "796d79de-3fc1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.237.248:45844/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777023726, "uuid": "db81646c-3fc1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.157.223:57475/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024211, "uuid": "fc45e3d6-3fc2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://talspireos.wi3sorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024518, "uuid": "b36e8169-3fc3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.115/SH4", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024518, "uuid": "b36ec1a1-3fc3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.115/Ciabins.sh", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024519, "uuid": "b40f43f8-3fc3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.115/POWERPC", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024519, "uuid": "b40f4874-3fc3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.115/ARMV5L", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024519, "uuid": "b40f552e-3fc3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.115/M68K", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024579, "uuid": "d7c995a2-3fc3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.115/I686", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024579, "uuid": "d7e20134-3fc3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.115/MIPS", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024579, "uuid": "d7e3ba8a-3fc3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.115/I586", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024630, "uuid": "f646a7d6-3fc3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.115/MIPSEL", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024630, "uuid": "f6488746-3fc3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.115/X86_64", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024643, "uuid": "fdf511c8-3fc3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.115/ARMV6L", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024643, "uuid": "fdfe561e-3fc3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.115/ARMV4L", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024646, "uuid": "ff8cdc4d-3fc3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.115/ARMV7L", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024689, "uuid": "192e083f-3fc4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.115/SPARC", "Tag": [ { "name": "176-65-139-115", "colour": "#d10584", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024747, "uuid": "3c042338-3fc4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ku193bt.wi3sorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024927, "uuid": "a7423a70-3fc4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.251.163:51249/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024993, "uuid": "ce827e5b-3fc4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.152/1.sh", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024995, "uuid": "cf61d459-3fc4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fallbasic.wi3sorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024999, "uuid": "d2223ea7-3fc4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.152/main_mips", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024999, "uuid": "d22750c0-3fc4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.152/main_x86_64", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024999, "uuid": "d2279d14-3fc4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.152/main_sh4", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024999, "uuid": "d230088a-3fc4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.152/main_mpsl", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024999, "uuid": "d2333479-3fc4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.152/main_arm6", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024999, "uuid": "d23334b8-3fc4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.152/main_arm7", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024999, "uuid": "d234357b-3fc4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.152/main_ppc", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024999, "uuid": "d23502e2-3fc4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.152/main_m68k", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777024999, "uuid": "d238eea7-3fc4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.152/main_x86", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025005, "uuid": "d552ba8f-3fc4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.152/main_arm5", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025061, "uuid": "f700264d-3fc4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.152/main_arm", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025093, "uuid": "09e3b76b-3fc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.14.251:54770/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025167, "uuid": "365c334a-3fc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastusout.wi3sorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025289, "uuid": "7f27d291-3fc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.205.38:34260/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025351, "uuid": "a3b389f5-3fc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://d34l-node.po7vaxel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025409, "uuid": "c6a19f3e-3fc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.131/bins/arm7", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025409, "uuid": "c6a1b598-3fc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.131/bins/ppc", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025409, "uuid": "c6a7cd9a-3fc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.131/bins/arm6", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025420, "uuid": "ccd43af9-3fc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.131/bins/arm5", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025420, "uuid": "ccde3458-3fc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.131/bins/cat.sh", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025420, "uuid": "ccdee49c-3fc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.131/bins/mips", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025420, "uuid": "cce1ab85-3fc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.131/bins/sh4", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025420, "uuid": "cce2f38b-3fc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.131/bins/mipsel", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025420, "uuid": "ccea93c8-3fc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.131/bins/m68k", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025479, "uuid": "eff5b8de-3fc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.131/bins/spc", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025479, "uuid": "f0031d24-3fc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.131/bins/x86_64", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025529, "uuid": "0e2f1c87-3fc6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.188.181.10:39301/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025536, "uuid": "123da4df-3fc6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.131/bins/x86", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025536, "uuid": "1250150c-3fc6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.131/bins/arm", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777025588, "uuid": "31142d9b-3fc6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pixobs.po7vaxel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777026072, "uuid": "51bef8f1-3fc7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://docyl.po7vaxel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777026199, "uuid": "9d19a275-3fc7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.72.102:51830/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777026339, "uuid": "f0fe3f2d-3fc7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.14.251:54770/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777026371, "uuid": "03a1cac1-3fc8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://jch52q.po7vaxel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777026426, "uuid": "2494873a-3fc8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.146/V0V/vision.i486", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777026426, "uuid": "24a663bc-3fc8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.146/V0V/vision.arc", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777026427, "uuid": "251df7c3-3fc8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.89.252.178:52189/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777026493, "uuid": "4c626b58-3fc8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.146/1.sh", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777026727, "uuid": "d821d224-3fc8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ajvo1s.po7vaxel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777026727, "uuid": "d84436c8-3fc8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.89.252.178:52189/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777026914, "uuid": "47bc2078-3fc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.184.143:54764/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777026971, "uuid": "699fa2d0-3fc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.82.242:55263/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777027098, "uuid": "b542cf4d-3fc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.246.194:33175/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777027223, "uuid": "ff77dc38-3fc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.160.139:36951/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777027386, "uuid": "6113c29a-3fca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://meta-b4rk.9zorexal.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777027629, "uuid": "f182a509-3fca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://geo-1atti.9zorexal.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777027883, "uuid": "89255737-3fcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.214.189:44576/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777027946, "uuid": "aed118b8-3fcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.119.220:37931/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777027997, "uuid": "ccecc634-3fcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.123.251:59775/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777027998, "uuid": "cd5d0bd4-3fcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.202.14.84:33403/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777028173, "uuid": "3610c561-3fcc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cascad5-cache.9zorexal.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777028227, "uuid": "55e2fa97-3fcc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.88.7.48:51338/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777028364, "uuid": "a7b8bd17-3fcc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.110/bins/sora.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777028423, "uuid": "cafc1417-3fcc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.110/bins/sora.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777028423, "uuid": "cafc143b-3fcc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.110/bins/sora.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777028423, "uuid": "cb1c06c4-3fcc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.110/bins/sora.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777028423, "uuid": "cb1ce8e6-3fcc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.110/bins/sora.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777028423, "uuid": "cb274e85-3fcc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.110/bins/sora.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777028423, "uuid": "cb276979-3fcc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.110/bins/sora.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777028423, "uuid": "cb29d6d4-3fcc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.110/bins/sora.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777028424, "uuid": "cb47fd4a-3fcc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.110/bins/sora.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777028424, "uuid": "cb480114-3fcc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.110/bins/sora.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777028477, "uuid": "eb40a75f-3fcc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.193.110/bins/sora.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777028528, "uuid": "094832c6-3fcd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.192.63:44606/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777028653, "uuid": "5417e9fe-3fcd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hmhfs.9zorexal.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777028658, "uuid": "56c470c6-3fcd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.205.38:34260/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777028671, "uuid": "5e7881e1-3fcd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.54.212.131:38644/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777028828, "uuid": "bc33b0aa-3fcd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.147.45:54546/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777028838, "uuid": "c1fc9f04-3fcd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.163.187.213:55034/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777029082, "uuid": "536db5b9-3fce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.246.194:33175/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777029136, "uuid": "73d248be-3fce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.52.120:34532/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777029136, "uuid": "7416130e-3fce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.91.79:58181/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777029192, "uuid": "958bd412-3fce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ultra-g0ld.9zorexal.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777029259, "uuid": "bd322b5f-3fce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.123.251:59775/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777029431, "uuid": "238a516f-3fcf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ungljmv.qi4mavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777029613, "uuid": "902b96a2-3fcf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.119.220:37931/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777029679, "uuid": "b78632a4-3fcf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.54.212.131:38644/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777029681, "uuid": "b886e6a6-3fcf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.113.174:50795/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777029726, "uuid": "d3c96a6b-3fcf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.88.7.48:51338/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777029728, "uuid": "d4718f44-3fcf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://shipdat.qi4mavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777030093, "uuid": "ae1ee3cb-3fd0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vellith4en.qi4mavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777030283, "uuid": "1f9ccfc0-3fd1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.165.106:41977/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777030286, "uuid": "217af33f-3fd1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.165.106:41977/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777030335, "uuid": "3e4ae027-3fd1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://otter0-array.qi4mavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777030464, "uuid": "8b291f30-3fd1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.163.187.213:55034/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777030466, "uuid": "8c5be629-3fd1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.202.14.84:33403/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777030517, "uuid": "aac35a08-3fd1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.122.240:54576/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777030750, "uuid": "35a7e643-3fd2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nzsrghd.qi4mavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777031054, "uuid": "eb2368a7-3fd2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://reed-pla.qi4mavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777031229, "uuid": "537b6945-3fd3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.108.161.48:59094/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777031233, "uuid": "55d20824-3fd3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.234.131:43277/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777031416, "uuid": "c2962594-3fd3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ihsk.de8xamel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777031528, "uuid": "05991a20-3fd4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.191.151:55634/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777031529, "uuid": "0621532b-3fd4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.108.161.48:59094/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777031715, "uuid": "74e0154f-3fd4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://talnex4on.de8xamel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777031719, "uuid": "77a43235-3fd4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.52.120:34532/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777031837, "uuid": "bdb52303-3fd4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.246.97:40470/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777031895, "uuid": "e031a418-3fd4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.91.79:58181/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777032082, "uuid": "50189d95-3fd5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.173:47999/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777032134, "uuid": "6eb6388d-3fd5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nhmud1dx.de8xamel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777032369, "uuid": "fb2f3ae5-3fd5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://c0ol6-field.de8xamel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777032681, "uuid": "b4bfb22b-3fd6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.90.241:34423/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777032920, "uuid": "430b9de1-3fd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.246.97:40470/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777032968, "uuid": "5fc5d536-3fd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.89.47:48213/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777032968, "uuid": "5fde3a34-3fd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.205.126:36974/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777033028, "uuid": "83f3212e-3fd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://33prnco.de8xamel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777033102, "uuid": "afd1a62a-3fd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.149.108:44591/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777033150, "uuid": "cc2143e5-3fd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://apostol.free.nf/img_095114.png", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777033153, "uuid": "cdea00b6-3fd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.discordapp.com/attachments/1497131696754135064/1497132075638067280/Pedido.js?ex=69ec6866&is=69eb16e6&hm=4caa37e847a28f8fc40185f5563c3c8156ce47bfaa7a7ed7f5f1645b2b8dc180&", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777033155, "uuid": "cf1b1423-3fd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://emailspro.store/MSI_151244.png", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777033270, "uuid": "13c9450c-3fd8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hkez.de8xamel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777033405, "uuid": "64aa8833-3fd8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.49.78:50854/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777033462, "uuid": "86897be8-3fd8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.90.241:34423/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777033879, "uuid": "7f0ea9ca-3fd9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.201.55:43104/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777033931, "uuid": "9df3b9fd-3fd9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.201.55:43104/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777033990, "uuid": "c0caff78-3fd9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastusout.wi3sorin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777033999, "uuid": "c65d0379-3fd9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.245.32:38817/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777034232, "uuid": "51686d72-3fda-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.177.77.161:4484/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777034243, "uuid": "57f3301a-3fda-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.148.39:54137/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777034359, "uuid": "9d346cd3-3fda-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.245.32:38817/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777034468, "uuid": "ddebfc58-3fda-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fallbasic.wi3sorin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777034527, "uuid": "013063d8-3fdb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.126.198:42229/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777034649, "uuid": "49b45b0b-3fdb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://anciesto.boa7dswim.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777034779, "uuid": "976a1c8f-3fdb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.89.2:42613/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777034902, "uuid": "e0b92beb-3fdb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.178.250:57129/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777034951, "uuid": "fdca836e-3fdb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.149.108:44591/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777035020, "uuid": "26c308f1-3fdc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.148.39:54137/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777035127, "uuid": "669cf35b-3fdc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.184.170:55229/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777035194, "uuid": "8eeb5429-3fdc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.49.78:50854/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777035246, "uuid": "adf86b6a-3fdc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://broad4-grid.boa7dswim.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777035256, "uuid": "b387dd1c-3fdc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.21.124:48154/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777035315, "uuid": "d6ea58a4-3fdc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.55.64.75:43048/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777035426, "uuid": "1938d645-3fdd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.184.170:55229/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777035491, "uuid": "3feea6f4-3fdd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://emroz.boa7dswim.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777035728, "uuid": "ccb79e88-3fdd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.177.77.161:4484/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777035790, "uuid": "f1ef89a2-3fdd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fleequot.boa7dswim.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036029, "uuid": "8050462d-3fde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.250.10:50454/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036029, "uuid": "8065cfa1-3fde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.126.198:42229/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036031, "uuid": "81674a3f-3fde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.250.10:50454/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036032, "uuid": "81ffb1ed-3fde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.146/V0V/vision.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036032, "uuid": "8204e35b-3fde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.146/V0V/vision.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036032, "uuid": "820544ff-3fde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.146/V0V/vision.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036033, "uuid": "82c499f0-3fde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://games.payos.cfd/gamesdior/main_m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036033, "uuid": "82cb07ec-3fde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://games.payos.cfd/gamesdior/main_ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036033, "uuid": "82cb09cd-3fde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://games.payos.cfd/gamesdior/main_mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036033, "uuid": "82e2d61b-3fde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.146/V0V/vision.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036033, "uuid": "82e2d9e4-3fde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.146/V0V/vision.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036033, "uuid": "82e2e03f-3fde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.146/V0V/vision.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036033, "uuid": "82e2e1ea-3fde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.146/V0V/vision.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036033, "uuid": "82e2e490-3fde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.146/V0V/vision.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036033, "uuid": "82e2e5d2-3fde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.146/V0V/vision.mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036033, "uuid": "82e2fb7d-3fde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.146/V0V/vision.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036033, "uuid": "82e8bdc7-3fde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.146/V0V/vision.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036033, "uuid": "82e8c7fb-3fde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.146/V0V/vision.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036033, "uuid": "82e8d455-3fde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.146/V0V/vision.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036033, "uuid": "82e8e638-3fde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.146/V0V/vision.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036033, "uuid": "82e9fd64-3fde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://games.payos.cfd/gamesdior/main_i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036033, "uuid": "82ea0054-3fde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://games.payos.cfd/gamesdior/main_arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036034, "uuid": "83765b88-3fde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://games.payos.cfd/gamesdior/main_i468", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036035, "uuid": "83deaf78-3fde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://games.payos.cfd/gamesdior/main_mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036036, "uuid": "844e915d-3fde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://games.payos.cfd/gamesdior/main_arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036036, "uuid": "844e915b-3fde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://games.payos.cfd/gamesdior/main_spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036036, "uuid": "844e9315-3fde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://games.payos.cfd/gamesdior/main_sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036036, "uuid": "8459dab1-3fde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://games.payos.cfd/gamesdior/main_x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036036, "uuid": "8462fc30-3fde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://games.payos.cfd/gamesdior/main_arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036039, "uuid": "86201f5b-3fde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://games.payos.cfd/gamesdior/main_x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036039, "uuid": "862026a7-3fde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://games.payos.cfd/gamesdior/main_arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036039, "uuid": "863f22b3-3fde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://games.payos.cfd/gamesdior/main_arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036049, "uuid": "8c87a202-3fde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://69sexy.duckdns.org/bins/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036099, "uuid": "a9fc1417-3fde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.89.2:42613/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036099, "uuid": "aa1b984f-3fde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.178.250:57129/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036211, "uuid": "eca66163-3fde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ten5or-point.boa7dswim.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036336, "uuid": "376fbdda-3fdf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.221.43:46652/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036510, "uuid": "9f4f17af-3fdf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pthq.boa7dswim.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777036990, "uuid": "bd750bb6-3fe0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sandboxrev.blockad-creak.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777037184, "uuid": "30ca57b3-3fe1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.dropbox.com/scl/fi/v5jlftdu3mnbgxut12vq9/RE538102DE-Rechnung-24-04-2026.vbs?rlkey=rr6uy2w6r7mscb6tch788zfuo&st=zqv9oka1&dl=1", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777037186, "uuid": "3207bfed-3fe1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.90.141:41234/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777037300, "uuid": "7628542c-3fe1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.52.129.192:34709/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777037349, "uuid": "93059cb8-3fe1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://courwind.blockad-creak.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777038069, "uuid": "4023dccd-3fe3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.73/o", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777038069, "uuid": "408c2dbf-3fe3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.164.55.107/mshta.vrf", "Tag": [ { "name": "beacon", "colour": "#3b3089", "exportable": true, "hide_tag": false }, { "name": "PrivateLoader", "colour": "#969637", "exportable": true, "hide_tag": false }, { "name": "RedLine", "colour": "#21e59a", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777038069, "uuid": "4090246c-3fe3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.164.55.107/counter/", "Tag": [ { "name": "beacon", "colour": "#3b3089", "exportable": true, "hide_tag": false }, { "name": "PrivateLoader", "colour": "#969637", "exportable": true, "hide_tag": false }, { "name": "RedLine", "colour": "#21e59a", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777038069, "uuid": "4090274c-3fe3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.164.55.107/count.txt", "Tag": [ { "name": "beacon", "colour": "#3b3089", "exportable": true, "hide_tag": false }, { "name": "PrivateLoader", "colour": "#969637", "exportable": true, "hide_tag": false }, { "name": "RedLine", "colour": "#21e59a", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777038069, "uuid": "40902f38-3fe3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.164.55.107/count.php", "Tag": [ { "name": "beacon", "colour": "#3b3089", "exportable": true, "hide_tag": false }, { "name": "PrivateLoader", "colour": "#969637", "exportable": true, "hide_tag": false }, { "name": "RedLine", "colour": "#21e59a", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777038069, "uuid": "40902fa3-3fe3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.164.55.107/preLoader.vrf", "Tag": [ { "name": "beacon", "colour": "#3b3089", "exportable": true, "hide_tag": false }, { "name": "PrivateLoader", "colour": "#969637", "exportable": true, "hide_tag": false }, { "name": "RedLine", "colour": "#21e59a", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777038070, "uuid": "40d9c99c-3fe3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.164.55.107/pack.vrf", "Tag": [ { "name": "beacon", "colour": "#3b3089", "exportable": true, "hide_tag": false }, { "name": "PrivateLoader", "colour": "#969637", "exportable": true, "hide_tag": false }, { "name": "RedLine", "colour": "#21e59a", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777038075, "uuid": "440257c5-3fe3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.83.245:40792/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777038076, "uuid": "446c189a-3fe3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://profit-guide.blockad-creak.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777038126, "uuid": "623a9b8c-3fe3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.164.55.107/verification.vrf", "Tag": [ { "name": "beacon", "colour": "#3b3089", "exportable": true, "hide_tag": false }, { "name": "PrivateLoader", "colour": "#969637", "exportable": true, "hide_tag": false }, { "name": "RedLine", "colour": "#21e59a", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777038127, "uuid": "631cce62-3fe3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.164.55.107/verif.vrf", "Tag": [ { "name": "beacon", "colour": "#3b3089", "exportable": true, "hide_tag": false }, { "name": "PrivateLoader", "colour": "#969637", "exportable": true, "hide_tag": false }, { "name": "RedLine", "colour": "#21e59a", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777038157, "uuid": "74e1ebcd-3fe3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://halfmillion-iq.com/halfmillion-iq.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777038382, "uuid": "fb2f6848-3fe3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zenfluxum.blockad-creak.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777038680, "uuid": "aca7bfea-3fe4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.90.141:41234/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777038924, "uuid": "3e040db7-3fe5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.215.247:38651/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777038970, "uuid": "59186fb9-3fe5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lummarkar5.blockad-creak.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777039216, "uuid": "ebf208bf-3fe5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rrdfp.extrav5achkovit.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777039448, "uuid": "763e84c4-3fe6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kelmeshos7.extrav5achkovit.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777039516, "uuid": "9ef8630d-3fe6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.215.247:38651/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777039626, "uuid": "e0ac5351-3fe6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.113.174:50795/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777040116, "uuid": "04a577b6-3fe8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://supplyalpha.extrav5achkovit.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777040289, "uuid": "6ba6ad10-3fe8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://geo-byt3.extrav5achkovit.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777040356, "uuid": "93847e48-3fe8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.50.36:47268/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777040528, "uuid": "f9ffddf5-3fe8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gv6cwq.extrav5achkovit.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777040793, "uuid": "982c428d-3fe9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.154.59:56376/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777040833, "uuid": "b01b7937-3fe9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.219.74.28:58121/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777041133, "uuid": "62611975-3fea-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://netw0r4-panel.extrav5achkovit.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777041557, "uuid": "5f4a32c9-3feb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.152.224:55770/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777041727, "uuid": "c4ad766d-3feb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://partnertra.foam-take.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777042332, "uuid": "2d817b8a-3fed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sol-coreis.foam-take.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777042636, "uuid": "e24bdb49-3fed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.166.95:49892/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777042928, "uuid": "90d4459d-3fee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://valleymount.foam-take.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777043056, "uuid": "dccd5ff7-3fee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.50.36:47268/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777043057, "uuid": "dd8d37d9-3fee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.124.40:43904/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777043167, "uuid": "1f08f14b-3fef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://falconshift.foam-take.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777043228, "uuid": "43653fc4-3fef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.242.76:33095/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777043229, "uuid": "43c0f955-3fef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.87.230:53522/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777043241, "uuid": "4b63ffdf-3fef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.152.224:55770/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777043410, "uuid": "b0154e02-3fef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://innercoupon.foam-take.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777043478, "uuid": "d8810a16-3fef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.240.178:46991/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777043528, "uuid": "f61c6535-3fef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.72.186:39731/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777043656, "uuid": "4272222f-3ff0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.210.86.124:54560/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777044010, "uuid": "15a21508-3ff1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://arkvale6os.foam-take.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777044127, "uuid": "5b7bede7-3ff1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.78.200:53731/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777044129, "uuid": "5c4dbfc0-3ff1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tonecalm.clo5etterebeat.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777044130, "uuid": "5d27513f-3ff1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.115.1:55274/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777044136, "uuid": "60c49753-3ff1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.217.84:37984/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777044384, "uuid": "f41c4ab6-3ff1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.203.148:47601/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777044667, "uuid": "9d0dbafd-3ff2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://labelparc.clo5etterebeat.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777044727, "uuid": "c0f4f5a6-3ff2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.242.76:33095/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777044967, "uuid": "4fc7f205-3ff3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://3df7.clo5etterebeat.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777045026, "uuid": "72d1bd83-3ff3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.87.230:53522/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777045159, "uuid": "c25016aa-3ff3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.60.176.173:33151/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777045332, "uuid": "29818293-3ff4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://denseink.clo5etterebeat.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777045636, "uuid": "deb7e6d4-3ff4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.64.8.168:51693/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777045813, "uuid": "480bc099-3ff5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.115.1:55274/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777045868, "uuid": "6909a0ca-3ff5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zenvale2on.clo5etterebeat.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777045928, "uuid": "8cb6d97c-3ff5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.217.84:37984/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777046293, "uuid": "65fd2b9e-3ff6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://moraltin.clo5etterebeat.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777046360, "uuid": "8df31576-3ff6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.3.1:49107/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777046588, "uuid": "1640eac2-3ff7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://draftroya.acquisit-batper.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777046599, "uuid": "1cb1e00b-3ff7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.64.8.168:51693/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777046825, "uuid": "a35e7a10-3ff7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.72.186:39731/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777046952, "uuid": "ef0d9514-3ff7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sipzix.acquisit-batper.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777047140, "uuid": "5f3f6b45-3ff8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.109.102:54217/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777047260, "uuid": "a6667d82-3ff8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.194.166:57819/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777047309, "uuid": "c3fba9c3-3ff8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://f0rrn4-logic.acquisit-batper.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777047608, "uuid": "763e594e-3ff9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tracfiel.acquisit-batper.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777047908, "uuid": "28f8e0d9-3ffa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://8cq295yx.acquisit-batper.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777048327, "uuid": "227484c0-3ffb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.234.131:43277/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777048327, "uuid": "22d94eb8-3ffb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://meta-irnpor.acquisit-batper.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777048327, "uuid": "22da49f7-3ffb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.212.118:39727/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777048692, "uuid": "fbdfcaea-3ffb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://switoken.drumf1esh.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777048929, "uuid": "8962349f-3ffc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.222.45.236:58911/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777048992, "uuid": "aeb5f894-3ffc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://urbanscarle.drumf1esh.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777049057, "uuid": "d5dc7920-3ffc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.194.166:57819/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777049592, "uuid": "149b28d5-3ffe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://memofreigh.drumf1esh.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777049593, "uuid": "1500e92e-3ffe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.100.60:51952/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777049663, "uuid": "3ea939c4-3ffe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.140.156:58189/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777049904, "uuid": "ce5775b0-3ffe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.26.148:38554/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777050026, "uuid": "173f6e9e-3fff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.188.203:39558/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777050127, "uuid": "53578389-3fff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.222.45.236:58911/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777050134, "uuid": "57656804-3fff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://secu-line.drumf1esh.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777050727, "uuid": "b932dda9-4000-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.11.18:35229/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777050802, "uuid": "e5d93900-4000-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.100.60:51952/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777050803, "uuid": "e63ccd6c-4000-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.65.241:38418/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777050865, "uuid": "0b2c6997-4001-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.26.148:38554/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777050917, "uuid": "2aa1f030-4001-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gu1de-signal.drumf1esh.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777051029, "uuid": "6d2775b8-4001-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.11.18:35229/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777051328, "uuid": "1f3b161b-4002-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://p82lmc.drumf1esh.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777051461, "uuid": "6edb94f9-4002-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.188.203:39558/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777051815, "uuid": "415f3843-4003-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://talvaleet.histori-pneumonia.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777052115, "uuid": "f48edcfc-4003-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://binaryboost.histori-pneumonia.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777052370, "uuid": "8c53a148-4004-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.63.184:53578/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777052472, "uuid": "c981ca2a-4004-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://arkdraos4.histori-pneumonia.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777052724, "uuid": "5fb2beed-4005-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.21.57:41970/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777052826, "uuid": "9c1b6ce7-4005-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cryst0-core.histori-pneumonia.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777053426, "uuid": "01cdc087-4007-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.229.245:37207/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777053429, "uuid": "03b8cdb9-4007-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sprdec.histori-pneumonia.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777053807, "uuid": "e4e4ac2f-4007-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.86.0:48555/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777053915, "uuid": "2526e8d0-4008-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://musglcb.pitifrube1la.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777054102, "uuid": "94bdcad9-4008-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.109.227.235:38312/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777054273, "uuid": "fa6b544c-4008-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://talfluxor3.pitifrube1la.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777054579, "uuid": "b0fde620-4009-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.86.83:46484/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777054927, "uuid": "805d5068-400a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.229.245:37207/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777055229, "uuid": "34b42cac-400b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://jzojka.pitifrube1la.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777055362, "uuid": "83b1160e-400b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.240.178:46991/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777055482, "uuid": "cb12f1c7-400b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.48.151:59180/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777055525, "uuid": "e4e7188a-400b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.188.181.10:39301/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777055651, "uuid": "2fc87931-400c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.150.21.18:38736/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777055770, "uuid": "76b9a8e6-400c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://shirela.pitifrube1la.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777055835, "uuid": "9de27b91-400c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.86.0:48555/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777056187, "uuid": "6faff69a-400d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://51lent-route.pitifrube1la.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777056369, "uuid": "dc0af2a7-400d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zfvhht.pitifrube1la.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777056426, "uuid": "fe0b84b6-400d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.225.15:38006/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777056439, "uuid": "05e2e039-400e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.22/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777056439, "uuid": "05e49e99-400e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.22/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777056439, "uuid": "05e4a6b7-400e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.22/lol.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777056439, "uuid": "05e4b8ed-400e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.22/arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777056439, "uuid": "05ea32d8-400e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.22/arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777056439, "uuid": "05eda599-400e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.22/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777056439, "uuid": "05eda8b4-400e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.22/arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777056439, "uuid": "05f75b60-400e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.22/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777056440, "uuid": "065e9f56-400e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.22/arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777056440, "uuid": "065ea5b3-400e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.22/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777056727, "uuid": "b192de01-400e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tbfnru68.arapnik-nosog.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777056799, "uuid": "dc0564f8-400e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://96.245.232.176:54940/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777057159, "uuid": "b2b87844-400f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.224.13.224:50631/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777057277, "uuid": "f8ee665d-400f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.187.46.66:47481/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777057329, "uuid": "182f1fa5-4010-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nivo.arapnik-nosog.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777057449, "uuid": "5ff54427-4010-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.84.240:53368/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777057627, "uuid": "ca0e09bf-4010-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.151.137.228:37335/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777057809, "uuid": "36739972-4011-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pine2-branch.arapnik-nosog.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777057925, "uuid": "7baff7b2-4011-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.215.173.87:38020/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777057998, "uuid": "a6d15bf1-4011-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.22/m68k", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777057998, "uuid": "a6d16427-4011-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.22//arm5", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777057998, "uuid": "a6d176d8-4011-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.22/arm64", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777057998, "uuid": "a6dbd22e-4011-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.22/i686", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777058120, "uuid": "efb0d2b3-4011-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.21.57:41970/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777058535, "uuid": "e6c5fe15-4012-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.247.90:38927/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777058589, "uuid": "0768c85b-4013-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lbwtqscv.arapnik-nosog.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777058721, "uuid": "55c32024-4013-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.187.46.66:47481/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777058838, "uuid": "9bbaf23b-4013-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.10.102:36588/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777059126, "uuid": "478a4690-4014-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.151.137.228:37335/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777059258, "uuid": "961cdca7-4014-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/streffy/999/-/raw/main/L7XH7UR9695U.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777059429, "uuid": "fbd96278-4014-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastebin.com/raw/tpQx02nZ", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777059432, "uuid": "fdd8e10e-4014-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.204.192.37:48776/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777059549, "uuid": "435b3ae9-4015-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://p4rt3-lab.arapnik-nosog.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777059749, "uuid": "ba64abcf-4015-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.107.30:54617/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777060042, "uuid": "692d41b4-4016-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.247.90:38927/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777060150, "uuid": "a9f07951-4016-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://va11dat-spark.arapnik-nosog.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777060275, "uuid": "f45624a8-4016-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.113.159:36350/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777060278, "uuid": "f6263931-4016-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.84.240:53368/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777060394, "uuid": "3b046e42-4017-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dark-star-4.limbe7revolut.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777060576, "uuid": "a7bf815e-4017-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.200.218.55:59674/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777060810, "uuid": "334b5721-4018-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zeit-2k.limbe7revolut.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777060997, "uuid": "a2bbeaa4-4018-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.204.192.37:48776/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777060997, "uuid": "a2bda54a-4018-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://71.56.88.23:45516/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777060997, "uuid": "a2be6e8c-4018-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.10.102:36588/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777061167, "uuid": "07a4caf0-4019-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rouge-mond-7.limbe7revolut.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777061528, "uuid": "deebdda4-4019-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-5.limbe7revolut.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777061949, "uuid": "da0aca9a-401a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gold-wald-1v.limbe7revolut.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777062020, "uuid": "04413019-401b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.2.189:44350/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777062188, "uuid": "6889f2fa-401b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://noir-8.limbe7revolut.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777062558, "uuid": "44e32c8d-401c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.154.8:37678/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777062610, "uuid": "640be726-401c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://open-land-3x.presidium-spike.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777062674, "uuid": "89efdc1e-401c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://71.56.88.23:45516/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777062908, "uuid": "157d302e-401d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vert-9.presidium-spike.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777063270, "uuid": "ed67d994-401d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://holz-berg-5.presidium-spike.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777063561, "uuid": "9ad1fa26-401e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.armour-inc-down.net/in/?SpotifyViewBot", "Tag": [ { "name": "pw-DR67KVLD", "colour": "#7674bc", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777063561, "uuid": "9b0a8d04-401e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.armour-inc-down.net/in/?HashCracker", "Tag": [ { "name": "pw-DR67KVLD", "colour": "#7674bc", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777063563, "uuid": "9bfe1fba-401e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.armour-inc-down.net/in/?GTAVCrackInstaller", "Tag": [ { "name": "pw-DR67KVLD", "colour": "#7674bc", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777063591, "uuid": "ac986f85-401e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.armour-inc-down.net/in/?FortniteAimbot", "Tag": [ { "name": "pw-DR67KVLD", "colour": "#7674bc", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777063627, "uuid": "c24da73f-401e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kalt-2c.presidium-spike.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777063700, "uuid": "edcffd3f-401e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.2.189:44350/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777063987, "uuid": "988d6ef4-401f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://petit-fire-6.presidium-spike.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777064229, "uuid": "28b22b72-4020-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.233.81:42849/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777064288, "uuid": "4bd59171-4020-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soft-4.presidium-spike.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777064357, "uuid": "75226ac5-4020-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/SeizeSectorPraise/7-Days-to-Die-Player-Detection/raw/refs/heads/main/7DaysToDiePD-1.4.0-win64.rar", "Tag": [ { "name": "pw-9931", "colour": "#108d85", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777064360, "uuid": "770b0a23-4020-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.154.8:37678/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777064410, "uuid": "94faa922-4020-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/SeizeSectorPraise/7-Days-to-Die-Player-Detection/refs/heads/main/7DaysToDiePD-1.4.0-win64.rar", "Tag": [ { "name": "pw-9931", "colour": "#108d85", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777064532, "uuid": "dd5951f2-4020-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/SeparateSoapmaker/cs2-report-tool/raw/refs/heads/main/CS2ReportTool-1.5.0-win64.rar", "Tag": [ { "name": "pw-4496", "colour": "#08aef6", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777064532, "uuid": "dd653d30-4020-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/SeparateSoapmaker/cs2-report-tool/refs/heads/main/CS2ReportTool-1.5.0-win64.rar", "Tag": [ { "name": "pw-4496", "colour": "#08aef6", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777064651, "uuid": "24362714-4021-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blue-mond-1m.dua1ismmatron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777064841, "uuid": "957068f2-4021-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.189.4.192:59572/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777064947, "uuid": "d4d3fb4d-4021-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://haus-7.dua1ismmatron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777065139, "uuid": "4723a696-4022-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.207.200.180:46002/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777065313, "uuid": "aec2bcdf-4022-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://iron-star-3.dua1ismmatron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777065611, "uuid": "6072105b-4023-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bleu-5.dua1ismmatron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777065680, "uuid": "89fce2d2-4023-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.140.160.76:52416/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777065735, "uuid": "aa959fe7-4023-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.183.26.44:32941/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777065910, "uuid": "12d66d4f-4024-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zeit-land-8v.dua1ismmatron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777066102, "uuid": "850a3f15-4024-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.108.187:40003/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777066212, "uuid": "c6a69350-4024-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.176.250:46174/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777066326, "uuid": "0b06c04b-4025-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.203.148:47601/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777066328, "uuid": "0bde4941-4025-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.207.200.180:46002/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777066394, "uuid": "333fbe2c-4025-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.81.104.117/bins/bin.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777066394, "uuid": "335c4ad0-4025-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.81.104.117/bin.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777066447, "uuid": "52d5dacf-4025-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-2.dua1ismmatron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777066507, "uuid": "76e75970-4025-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Suren19173021/mytestproject/refs/heads/main/vintager/Software_1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777066507, "uuid": "76e75b57-4025-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Jonasedwardsalkfirehose824/bobanimelist/refs/heads/main/.droid/Software-2.9-beta.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777066508, "uuid": "7719c3f1-4025-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ericliu8888/blog-preview-card/raw/refs/heads/main/assets/preview-blog-card-outtop.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777066508, "uuid": "7719f9fe-4025-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Jonasedwardsalkfirehose824/bobanimelist/raw/refs/heads/main/.droid/Software-2.9-beta.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777066508, "uuid": "772529fb-4025-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Behera-babu/ai-fastapi-mlops/refs/heads/main/monitoring/fastapi-ai-mlops-2.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777066508, "uuid": "77253ebd-4025-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ericliu8888/blog-preview-card/refs/heads/main/assets/preview-blog-card-outtop.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777066509, "uuid": "77f6fdd0-4025-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Behera-babu/ai-fastapi-mlops/raw/refs/heads/main/monitoring/fastapi-ai-mlops-2.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777066509, "uuid": "77fb1e16-4025-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Machato2708/Beyond-Charts-Interactive-Storytelling/refs/heads/main/illegalize/Interactive_Charts_Beyond_Storytelling_v1.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777066510, "uuid": "78732913-4025-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Machato2708/Beyond-Charts-Interactive-Storytelling/raw/refs/heads/main/illegalize/Interactive_Charts_Beyond_Storytelling_v1.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777066513, "uuid": "7a7e2749-4025-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Suren19173021/mytestproject/raw/refs/heads/main/vintager/Software_1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777066521, "uuid": "7eff236a-4025-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.178.77:51048/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777066751, "uuid": "080ca73c-4026-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gold-fire-9w.fixt-turbine.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777067298, "uuid": "4e6afc55-4027-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.90.247:55407/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777067347, "uuid": "6b926059-4027-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rouge-4.fixt-turbine.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777067527, "uuid": "d692c46f-4027-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.69.192:37469/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777067527, "uuid": "d6f99865-4027-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dark-berg-2.fixt-turbine.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777067596, "uuid": "fffd49fa-4027-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.197.147:40588/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777067708, "uuid": "42c7aebb-4028-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soft-6.fixt-turbine.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777067826, "uuid": "88f80927-4028-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.69.192:37469/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777067827, "uuid": "8993c757-4028-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.110.2:48864/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068134, "uuid": "4060e7ad-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/AdrianNablo/AdrianNablo.github.io/refs/heads/main/unpremeditatedly/github-Nablo-io-Adrian-3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068134, "uuid": "40a7c977-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Dishonorpeachpit230/fijahu-5/refs/heads/main/quiz/fijahu_v2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068135, "uuid": "411055ff-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/lumansitrevormwesigwa/ParallaxParticles/refs/heads/main/Parallax.xcodeproj/xcuserdata/pa.alekseev.xcuserdatad/xcschemes/Parallax_Particles_2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068135, "uuid": "41477f96-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Szhuaa/PyFlightProfiler/refs/heads/main/flight_profiler/plugins/tt/Profiler_Py_Flight_3.7-beta.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068135, "uuid": "4147e807-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Floyddemocratic337/fijahu-6/raw/refs/heads/main/sibby/fijahu_v1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "417516ad-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Celestiapolyunsaturated14/Helios-Engine/raw/refs/heads/master/tests/Helios_Engine_v1.3-beta.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "41757266-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/lumansitrevormwesigwa/ParallaxParticles/raw/refs/heads/main/Parallax.xcodeproj/xcuserdata/pa.alekseev.xcuserdatad/xcschemes/Parallax_Particles_2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "4176d90a-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/WijewardhanaGayashi/Photography_Website/raw/refs/heads/master/PhpMailer/vendor/phpmailer/phpmailer/src/Photography_Website_v3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "417a8c3f-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/WijewardhanaGayashi/Photography_Website/refs/heads/master/PhpMailer/vendor/phpmailer/phpmailer/src/Photography_Website_v3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "417addbc-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Huseindyslexic178/Internee.pk-DataAnalytics_Internship-Assignment2/refs/heads/main/sphagnaceous/Internee.pk-DataAnalytics_Internship-Assignment2-v3.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "417d21f5-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Floyddemocratic337/fijahu-6/refs/heads/main/sibby/fijahu_v1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "417d60cf-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/murad63/StarWhore/refs/heads/main/polyphaser/Star_Whore_v2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "41800003-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Celestiapolyunsaturated14/Helios-Engine/refs/heads/master/tests/Helios_Engine_v1.3-beta.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "41a207af-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/AbdoooAli/precision-aim-8ball-pool/raw/refs/heads/branch/catacorolla/precision-pool-aim-ball-1.3-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "41b57b57-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/sooryanaga/qt-liquid-glass/raw/refs/heads/main/bulliform/qt_glass_liquid_3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "41b7f08c-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/AdrianNablo/AdrianNablo.github.io/raw/refs/heads/main/unpremeditatedly/github-Nablo-io-Adrian-3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "41b8eb44-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/WijewardhanaGayashi/Grifindo_Toy_NEw_System/refs/heads/main/buba/Ew_System_N_Grifindo_Toy_1.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "41b8fa97-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Szhuaa/Java-Fundamentals-fullname-/raw/refs/heads/main/postphlogistic/fullname_Fundamentals_Java_v3.6-alpha.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "41b9c943-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/lkjhygtgvbhnjk/jquery-image-slider/refs/heads/main/js/jquery-slider-image-2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "41bb9c6c-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/AbdoooAli/precision-aim-8ball-pool/refs/heads/branch/catacorolla/precision-pool-aim-ball-1.3-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "41bbeaab-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/AdrianNablo/neon-abyss-2-mod-toolkit/refs/heads/branch/hypsophyllary/neon-toolkit-abyss-mod-v3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "41bd2fb3-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/momofrd00/jquery-status-message/refs/heads/main/css/status_message_jquery_2.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "41bddd29-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Szhuaa/Java-Fundamentals-fullname-/refs/heads/main/postphlogistic/fullname_Fundamentals_Java_v3.6-alpha.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "41e4aec2-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/murad63/StarWhore/raw/refs/heads/main/polyphaser/Star_Whore_v2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "41ec0a8f-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Dishonorpeachpit230/fijahu-5/raw/refs/heads/main/quiz/fijahu_v2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068136, "uuid": "41f08a33-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/WijewardhanaGayashi/awesome-dotnet/raw/refs/heads/main/impersonize/awesome-dotnet-v2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068137, "uuid": "41feb1b5-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/AdrianNablo/neon-abyss-2-mod-toolkit/raw/refs/heads/branch/hypsophyllary/neon-toolkit-abyss-mod-v3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068137, "uuid": "41fec021-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/momofrd00/wpu-resolusi/raw/refs/heads/master/distractedness/wpu-resolusi-reapparition.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068137, "uuid": "4203624a-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/lkjhygtgvbhnjk/jquery-image-slider/raw/refs/heads/main/js/jquery-slider-image-2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068137, "uuid": "421680fd-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/WijewardhanaGayashi/Grifindo_Toy_NEw_System/raw/refs/heads/main/buba/Ew_System_N_Grifindo_Toy_1.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068137, "uuid": "4218c51b-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/momofrd00/jquery-status-message/raw/refs/heads/main/css/status_message_jquery_2.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068137, "uuid": "4218cd85-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/momofrd00/Dunia-Gelap-Butuh-Resolusi-2023/refs/heads/main/nontidal/Butuh-Gelap-Resolusi-Dunia-v2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068137, "uuid": "421d46e4-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Huseindyslexic178/Internee.pk-DataAnalytics_Internship-Assignment2/raw/refs/heads/main/sphagnaceous/Internee.pk-DataAnalytics_Internship-Assignment2-v3.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068137, "uuid": "421d596b-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/sooryanaga/obscure-affairs-unlocked-edition/raw/refs/heads/branch/taurobolium/unlocked-obscure-affairs-edition-3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068137, "uuid": "42385a68-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/momofrd00/wpu-resolusi/refs/heads/master/distractedness/wpu-resolusi-reapparition.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068137, "uuid": "4241defa-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/momofrd00/Dunia-Gelap-Butuh-Resolusi-2023/raw/refs/heads/main/nontidal/Butuh-Gelap-Resolusi-Dunia-v2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068137, "uuid": "424d318f-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/AbdoooAli/corellm/raw/refs/heads/main/corellm/Software_calaba.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068137, "uuid": "4254c0ec-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/WijewardhanaGayashi/awesome-dotnet/refs/heads/main/impersonize/awesome-dotnet-v2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068137, "uuid": "425e54d8-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/AdrianNablo/.ai-dev/raw/refs/heads/main/features/dev_ai_v3.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068138, "uuid": "42b28c70-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/AdrianNablo/.ai-dev/refs/heads/main/features/dev_ai_v3.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068140, "uuid": "43e241eb-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Szhuaa/PyFlightProfiler/raw/refs/heads/main/flight_profiler/plugins/tt/Profiler_Py_Flight_3.7-beta.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068140, "uuid": "43ec3887-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/sooryanaga/obscure-affairs-unlocked-edition/refs/heads/branch/taurobolium/unlocked-obscure-affairs-edition-3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777068142, "uuid": "45792157-4029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/AbdoooAli/corellm/refs/heads/main/corellm/Software_calaba.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069087, "uuid": "7899314a-402b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/sooryanaga/qt-liquid-glass/refs/heads/main/bulliform/qt_glass_liquid_3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069087, "uuid": "78c68377-402b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.79.147.245:47869/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069089, "uuid": "79b8d254-402b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://open-1.fixt-turbine.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069091, "uuid": "7a9e112d-402b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://petit-wald-7k.fixt-turbine.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069101, "uuid": "80968f68-402b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.15.13:50832/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069114, "uuid": "8894eec8-402b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.199.228:60277/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069222, "uuid": "c8c48c4f-402b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.160.139:36951/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069332, "uuid": "0a64aa36-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Dim747/Zaluea/refs/heads/main/Site/games/flappybird/files/assets/3371288/1/Software_v1.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069332, "uuid": "0a7b85d1-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/DarkException22/alphabet/refs/heads/main/src/cmps/Software_unattuned.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069332, "uuid": "0a7d2907-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.213.78:33217/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069333, "uuid": "0af8d35a-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Dim747/Zaluea/raw/refs/heads/main/Site/games/flappybird/files/assets/3371288/1/Software_v1.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069333, "uuid": "0afbfece-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/DarkException22/alphabet/raw/refs/heads/main/src/cmps/Software_unattuned.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069333, "uuid": "0b227198-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/pgmonitorbrasil/nav2_hybrid_A_star/refs/heads/main/src/data/nav_hybrid_star_v2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069333, "uuid": "0b3fc445-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/pgmonitorbrasil/pgmonitorbrasil.github.io/refs/heads/main/schematonics/io_pgmonitorbrasil_github_v3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069333, "uuid": "0b68680e-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/YDanok01/ydanok01.github.io/refs/heads/main/eagless/github_ydanok_io_v3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069334, "uuid": "0b8aca91-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/YDanok01/Flipper/raw/refs/heads/main/Sub-GHz/Remote_Outlet_Switches/Voltman_DIO041050/Software_v3.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069334, "uuid": "0b8f25d1-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/YDanok01/Flipper/refs/heads/main/Sub-GHz/Remote_Outlet_Switches/Voltman_DIO041050/Software_v3.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069334, "uuid": "0b9d167d-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Bubreg0301/bubreg0301.github.io/raw/refs/heads/main/impedance/io_bubreg_github_v3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069334, "uuid": "0bb5fc8d-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/YDanok01/awesome-flipperzero/refs/heads/main/squirrelfish/flipperzero_awesome_2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069334, "uuid": "0bde020b-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Bubreg0301/tracey/raw/refs/heads/main/docs/spec/Software-3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069334, "uuid": "0bf7e70a-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/pgmonitorbrasil/nav2_hybrid_A_star/raw/refs/heads/main/src/data/nav_hybrid_star_v2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069335, "uuid": "0c4dde47-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/afa567/universal-ideation-v3/refs/heads/main/driftpiece/ideation-universal-v-v1.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069335, "uuid": "0c4df83e-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Bubreg0301/tracey/refs/heads/main/docs/spec/Software-3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069335, "uuid": "0c501049-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Dim747/NovaBar/raw/refs/heads/main/data/Nova-Bar-2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069335, "uuid": "0c689a4b-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/DarkException22/Aayush/refs/heads/master/dietic/Software-commenceable.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069335, "uuid": "0c75e948-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/DarkException22/Aayush/raw/refs/heads/master/dietic/Software-commenceable.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069335, "uuid": "0c8045a4-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/DarkException22/da-hood-lock-script-showcase/raw/refs/heads/main/noncredent/showcase_hood_da_script_lock_1.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069335, "uuid": "0c89a2a8-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Detsad312/openbento/raw/refs/heads/main/components/Software_v3.2-beta.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069336, "uuid": "0ca64ab6-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/afa567/universal-ideation-v3/raw/refs/heads/main/driftpiece/ideation-universal-v-v1.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069336, "uuid": "0cebf7ec-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/YDanok01/ydanok01.github.io/raw/refs/heads/main/eagless/github_ydanok_io_v3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069337, "uuid": "0d46954b-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/DarkException22/da-hood-lock-script-showcase/refs/heads/main/noncredent/showcase_hood_da_script_lock_1.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069337, "uuid": "0d537219-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/pgmonitorbrasil/pgmonitorbrasil.github.io/raw/refs/heads/main/schematonics/io_pgmonitorbrasil_github_v3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069337, "uuid": "0d713026-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/afa567/afa567.github.io/refs/heads/main/foreadvice/afa_github_io_2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069337, "uuid": "0d768b96-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Detsad312/detsad312.github.io/raw/refs/heads/main/untwinned/io-github-detsad-2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069338, "uuid": "0decec0e-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Dim747/dim747.github.io/raw/refs/heads/main/downfold/dim-github-io-myogenetic.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069338, "uuid": "0df80c74-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/afa567/afa567.github.io/raw/refs/heads/main/foreadvice/afa_github_io_2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069338, "uuid": "0df913ac-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Dim747/dim747.github.io/refs/heads/main/downfold/dim-github-io-myogenetic.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069338, "uuid": "0e05e7ab-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/YDanok01/profile-metadata/raw/refs/heads/main/spiranthy/metadata-profile-v1.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069338, "uuid": "0e0c0b4b-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Mo911-W16/mo911-w16.github.io/raw/refs/heads/main/towards/github-w-mo-io-badenite.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069338, "uuid": "0e0f91b5-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Mo911-W16/mo911-w16.github.io/refs/heads/main/towards/github-w-mo-io-badenite.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069338, "uuid": "0e0fc095-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Detsad312/openbento/refs/heads/main/components/Software_v3.2-beta.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069338, "uuid": "0e309ea4-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Mo911-W16/NovaBar/raw/refs/heads/main/src/about/Bar-Nova-spiritfully.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069338, "uuid": "0e4e1830-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/NovaBiriseg/GPIO-LED-cycle/raw/refs/heads/main/Drivers/STM32F4xx_HAL_Driver/Src/LE-cycle-GPI-1.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069339, "uuid": "0e8dabee-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Mo911-W16/NovaBar/refs/heads/main/src/about/Bar-Nova-spiritfully.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069339, "uuid": "0e952386-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Detsad312/detsad312.github.io/refs/heads/main/untwinned/io-github-detsad-2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069339, "uuid": "0e970e46-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Bubreg0301/bubreg0301.github.io/refs/heads/main/impedance/io_bubreg_github_v3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069339, "uuid": "0e9a0c14-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/YDanok01/profile-metadata/refs/heads/main/spiranthy/metadata-profile-v1.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069339, "uuid": "0ea84aa7-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/DarkException22/darkexception22.github.io/raw/refs/heads/main/unreachably/darkexception_github_io_v2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069339, "uuid": "0eb9f414-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/NovaBiriseg/GPIO-LED-cycle/refs/heads/main/Drivers/STM32F4xx_HAL_Driver/Src/LE-cycle-GPI-1.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069339, "uuid": "0ecf82d9-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://noir-land-5s.ales1ine.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069339, "uuid": "0eda705d-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/DarkException22/darkexception22.github.io/refs/heads/main/unreachably/darkexception_github_io_v2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777069339, "uuid": "0ef031a4-402c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Dim747/NovaBar/refs/heads/main/data/Nova-Bar-2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070227, "uuid": "2025b742-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/YDanok01/awesome-flipperzero/raw/refs/heads/main/squirrelfish/flipperzero_awesome_2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070228, "uuid": "2054a0b7-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.110.2:48864/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070229, "uuid": "21074291-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://holz-baum-8.ales1ine.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070230, "uuid": "21ac3799-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vert-3.ales1ine.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070240, "uuid": "27c965d2-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.32.245:49758/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070240, "uuid": "27d290d2-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.150.21.18:38736/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070354, "uuid": "6b8d0989-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Soufiane20032003/soufiane20032003.github.io/refs/heads/main/coupling/soufiane-io-github-v1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070354, "uuid": "6bcdcd39-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/FAISALODAY/EvoTokenDLM/raw/refs/heads/master/assets/DLM_Evo_Token_1.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070354, "uuid": "6bd08bff-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Soufiane20032003/astro-pu/refs/heads/main/src/content/blog/pu_astro_v1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070354, "uuid": "6bd6bf8c-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Websyze/websyze.github.io/raw/refs/heads/main/invisible/io-github-websyze-overcustom.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070354, "uuid": "6bd7cdd9-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Websyze/websyze.github.io/refs/heads/main/invisible/io-github-websyze-overcustom.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070354, "uuid": "6bddbbca-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/theenemylost/theenemylost.github.io/refs/heads/main/predaylight/theenemylost_io_github_v1.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070354, "uuid": "6be604ef-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/jeffplatinum1013/jeffplatinum1013.github.io/raw/refs/heads/main/crook/io_jeffplatinum_github_1.6-alpha.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070354, "uuid": "6c0043dc-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Websyze/appium-flutter-java-automation/refs/heads/main/src/main/java/appium_java_automation_flutter_1.2-alpha.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070354, "uuid": "6c00e6da-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/techgyan123/Transformer-Hierarchical-Layers/refs/heads/main/tests/utils/Layers-Hierarchical-Transformer-3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070355, "uuid": "6c0d81e5-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Websyze/Propesy_Demon/refs/heads/main/public/Propesy-Demon-2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070355, "uuid": "6c0dc0dd-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/jhoi2000/Zen-C/refs/heads/master/images/Zen_C_hydramnion.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070355, "uuid": "6c1befd6-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/jeffplatinum1013/jeffplatinum1013.github.io/refs/heads/main/crook/io_jeffplatinum_github_1.6-alpha.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070355, "uuid": "6c223390-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/FAISALODAY/EvoTokenDLM/refs/heads/master/assets/DLM_Evo_Token_1.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070355, "uuid": "6c2ff507-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Soufiane20032003/astro-pu/raw/refs/heads/main/src/content/blog/pu_astro_v1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070355, "uuid": "6c321222-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Soufiane20032003/soufiane20032003.github.io/raw/refs/heads/main/coupling/soufiane-io-github-v1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070355, "uuid": "6c37a41c-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/FAISALODAY/faisaloday.github.io/refs/heads/main/vesiculigerous/github_faisaloday_io_2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070355, "uuid": "6c3ef528-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/theenemylost/theenemylost.github.io/raw/refs/heads/main/predaylight/theenemylost_io_github_v1.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070355, "uuid": "6c43114c-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/jhoi2000/jhoi2000.github.io/refs/heads/main/sociometry/github-jhoi-io-v2.3-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070355, "uuid": "6c43304e-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/MTELEJ/mtelej.github.io/refs/heads/main/outdream/io-github-mtelej-2.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070355, "uuid": "6c6d0e51-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/techgyan123/Transformer-Hierarchical-Layers/raw/refs/heads/main/tests/utils/Layers-Hierarchical-Transformer-3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070355, "uuid": "6c746926-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Websyze/appium-flutter-java-automation/raw/refs/heads/main/src/main/java/appium_java_automation_flutter_1.2-alpha.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070355, "uuid": "6c7764b6-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/FAISALODAY/faisaloday.github.io/raw/refs/heads/main/vesiculigerous/github_faisaloday_io_2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070356, "uuid": "6cad1d5b-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/MTELEJ/solana-dev-skill/raw/refs/heads/main/skill/solana-dev-skill-3.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070356, "uuid": "6caffe51-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Websyze/Bot-n-animado-con-HTML-y-CSS/refs/heads/master/leatman/HTM_n_y_CSS_animado_Bot_con_2.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070356, "uuid": "6cb4c34b-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/MTELEJ/mtelej.github.io/raw/refs/heads/main/outdream/io-github-mtelej-2.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070356, "uuid": "6cb810c8-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/jhoi2000/Zen-C/raw/refs/heads/master/images/Zen_C_hydramnion.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070356, "uuid": "6cc211e4-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/MTELEJ/solana-dev-skill/refs/heads/main/skill/solana-dev-skill-3.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070356, "uuid": "6cd00d16-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/techgyan123/techgyan123.github.io/raw/refs/heads/main/stinkball/techgyan_github_io_thunderously.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070356, "uuid": "6cd722d0-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Websyze/Propesy_Demon/raw/refs/heads/main/public/Propesy-Demon-2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070356, "uuid": "6cdfb8b4-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/jeffplatinum1013/full-stack-fastapi-mongodb/raw/refs/heads/main/%7D/scripts/mongodb_fastapi_full_stack_v3.5-beta.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070356, "uuid": "6ce335b5-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Websyze/gestion_voluntario/refs/heads/main/organizacion/voluntario_gestion_3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070356, "uuid": "6ce5ac11-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Websyze/gestion_voluntario/raw/refs/heads/main/organizacion/voluntario_gestion_3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070356, "uuid": "6ceff78e-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/theenemylost/community-design-resources/refs/heads/main/brand-assets/rolldown/community-resources-design-v1.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070356, "uuid": "6cfc89d5-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/theenemylost/community-design-resources/raw/refs/heads/main/brand-assets/rolldown/community-resources-design-v1.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070356, "uuid": "6d01783b-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Websyze/W_Merchs/refs/heads/main/src/layouts/Merchs_3.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070356, "uuid": "6d018dd9-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/techgyan123/techgyan123.github.io/refs/heads/main/stinkball/techgyan_github_io_thunderously.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070356, "uuid": "6d024054-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ziebwon/cnmsb/raw/refs/heads/main/docs/apt/dists/stable/Software-3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070357, "uuid": "6d4a7042-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ziebwon/cnmsb/refs/heads/main/docs/apt/dists/stable/Software-3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070357, "uuid": "6d5364cd-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/jeffplatinum1013/full-stack-fastapi-mongodb/refs/heads/main/%7D/scripts/mongodb_fastapi_full_stack_v3.5-beta.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070357, "uuid": "6dcc218d-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/jhoi2000/jhoi2000.github.io/raw/refs/heads/main/sociometry/github-jhoi-io-v2.3-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777070360, "uuid": "6f1467f5-402e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Websyze/W_Merchs/raw/refs/heads/main/src/layouts/Merchs_3.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777071247, "uuid": "7ffe550b-4030-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.79.147.245:47869/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777071247, "uuid": "8004711c-4030-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.213.78:33217/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777071247, "uuid": "803b00d2-4030-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/ohshit.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777071252, "uuid": "833f1bce-4030-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Websyze/Bot-n-animado-con-HTML-y-CSS/raw/refs/heads/master/leatman/HTM_n_y_CSS_animado_Bot_con_2.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777071253, "uuid": "83b81d0e-4030-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blue-star-2m.ales1ine.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777071256, "uuid": "8529fd84-4030-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kalt-4.ales1ine.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777071256, "uuid": "854aac9a-4030-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/bins/jade.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777071256, "uuid": "854ea250-4030-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/bins/jade.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777071256, "uuid": "854ec7e5-4030-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/bins/jade.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777071256, "uuid": "8550fc4f-4030-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/bins/jade.arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777071256, "uuid": "85512be3-4030-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/bins/jade.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777071256, "uuid": "8552025c-4030-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/bins/jade.arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777071256, "uuid": "859e5ad0-4030-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.105.63:46173/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777071261, "uuid": "887456cd-4030-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/bins/jade.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777071261, "uuid": "88914722-4030-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/bins/jade.arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777071261, "uuid": "889d2fd5-4030-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/bins/jade.arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777071262, "uuid": "892eaf1a-4030-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.195.10:53030/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777071263, "uuid": "8953698c-4030-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.195.10:53030/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777071266, "uuid": "8b2d7bdf-4030-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/bins/jade.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777071271, "uuid": "8e53e91a-4030-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/bins/jade.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777071428, "uuid": "eb9e8d56-4030-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.218.145:40175/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777071438, "uuid": "f189bf5a-4030-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zeit-9.ales1ine.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777071742, "uuid": "a6fba88c-4031-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.32.245:49758/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777071793, "uuid": "c59f4031-4031-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://iron-mond-7x.archit-physiol.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777071987, "uuid": "394edb94-4032-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.8.146:59616/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777072027, "uuid": "50e94912-4032-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.242.110:36801/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777072093, "uuid": "7815bdb7-4032-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bleu-1.archit-physiol.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777072219, "uuid": "c38789a4-4032-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.65.25:37814/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777072452, "uuid": "4e0f5f3d-4033-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-berg-4.archit-physiol.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777072522, "uuid": "77b9944e-4033-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Maplecoder18/maplecoder18.github.io/refs/heads/main/flaky/maplecoder_io_github_v2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777072522, "uuid": "77b9d7c6-4033-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ojamesalaba93/bloom/raw/refs/heads/main/packages/bloom/Software-2.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777072522, "uuid": "77d921a5-4033-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Maplecoder18/maplecoder18.github.io/raw/refs/heads/main/flaky/maplecoder_io_github_v2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777072522, "uuid": "77d9aacc-4033-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/timiallen/space-project/refs/heads/master/home/project-space-3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777072522, "uuid": "781b3a8a-4033-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/hankamarvanova/hankamarvanova.github.io/raw/refs/heads/main/steamproof/io_hankamarvanova_github_v2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777072523, "uuid": "783e31ff-4033-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ojamesalaba93/bloom/refs/heads/main/packages/bloom/Software-2.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777072523, "uuid": "783e3a80-4033-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/timiallen/space-project/raw/refs/heads/master/home/project-space-3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777072523, "uuid": "783e3cc8-4033-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/hankamarvanova/hankamarvanova.github.io/refs/heads/main/steamproof/io_hankamarvanova_github_v2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777072523, "uuid": "783e3d79-4033-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Maplecoder18/Qwen3-VL-Embedding/raw/refs/heads/main/scripts/evaluation/mmeb_v2/Qwen-V-Embedding-v3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777072523, "uuid": "785742f7-4033-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/hankamarvanova/unified-db/raw/refs/heads/main/Sources/db_unified_3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777072523, "uuid": "7857fc49-4033-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/timiallen/simple-calculator/raw/refs/heads/master/node_modules/get-intrinsic/.github/calculator_simple_v1.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777072523, "uuid": "7857fe9d-4033-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Craftmesut/geanos-scene-optimizer/raw/refs/heads/main/styles/optimizer-scene-geanos-keenly.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777072523, "uuid": "785829bd-4033-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/timiallen/laravael-ui-dashboard/raw/refs/heads/main/resources/views/pages/laravel/ui-laravael-dashboard-vitamer.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777072523, "uuid": "785862d4-4033-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ojamesalaba93/ojamesalaba93.github.io/raw/refs/heads/main/stormward/io_ojamesalaba_github_v2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777072523, "uuid": "785865cb-4033-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/timiallen/laravael-ui-dashboard/refs/heads/main/resources/views/pages/laravel/ui-laravael-dashboard-vitamer.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777072523, "uuid": "787888eb-4033-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/timiallen/simple-calculator/refs/heads/master/node_modules/get-intrinsic/.github/calculator_simple_v1.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777072523, "uuid": "78789e63-4033-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/kevlar782/genshin-ts/raw/refs/heads/main/whitecap/ts-genshin-2.2-alpha.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777072523, "uuid": "7878af85-4033-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Maplecoder18/game/raw/refs/heads/main/reputed/Software-v1.8-alpha.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777072523, "uuid": "78795b43-4033-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Espressivep/Nextjs-Tailwind-PostgreSQL-Project-Template/raw/refs/heads/main/app/Project-Nextjs-Template-Tailwind-Postgre-SQ-v1.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777072523, "uuid": "787a85b4-4033-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Espressivep/espressivep.github.io/raw/refs/heads/main/infelicitousness/io-espressivep-github-2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777072523, "uuid": "787ae6a0-4033-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Craftmesut/craftmesut.github.io/raw/refs/heads/main/yuca/craftmesut_github_io_v1.8-beta.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777072523, "uuid": "7898bc66-4033-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/hankamarvanova/unified-db/refs/heads/main/Sources/db_unified_3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777072523, "uuid": "789fb8f7-4033-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ojamesalaba93/ojamesalaba93.github.io/refs/heads/main/stormward/io_ojamesalaba_github_v2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777072523, "uuid": "78a111e7-4033-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Maplecoder18/Qwen3-VL-Embedding/refs/heads/main/scripts/evaluation/mmeb_v2/Qwen-V-Embedding-v3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777072523, "uuid": "78adf25f-4033-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Espressivep/Nextjs-Tailwind-PostgreSQL-Project-Template/refs/heads/main/app/Project-Nextjs-Template-Tailwind-Postgre-SQ-v1.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777072523, "uuid": "78b03c6b-4033-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Maplecoder18/game/refs/heads/main/reputed/Software-v1.8-alpha.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777072523, "uuid": "78b3300d-4033-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Craftmesut/geanos-scene-optimizer/refs/heads/main/styles/optimizer-scene-geanos-keenly.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777072523, "uuid": "78b3c459-4033-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Espressivep/espressivep.github.io/refs/heads/main/infelicitousness/io-espressivep-github-2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777072523, "uuid": "78b3eb11-4033-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/kevlar782/kevlar782.github.io/refs/heads/main/elocutionary/io-github-kevlar-eremology.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777072523, "uuid": "78b56752-4033-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Craftmesut/craftmesut.github.io/refs/heads/main/yuca/craftmesut_github_io_v1.8-beta.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777072523, "uuid": "78b5824e-4033-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/kevlar782/genshin-ts/refs/heads/main/whitecap/ts-genshin-2.2-alpha.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073409, "uuid": "8869cd35-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/raditpasy25/raditpasy25.github.io/refs/heads/main/degradement/github-raditpasy-io-2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073409, "uuid": "88896566-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ipoprock/claude-code-showcase/refs/heads/main/.claude/skills/core-components/showcase-claude-code-3.2-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073409, "uuid": "8891cdba-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/muradaldahmashi/Android-Development/raw/refs/heads/main/Examples/Android-Development-v3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073409, "uuid": "88b7628b-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ipoprock/ipoprock.github.io/raw/refs/heads/main/decanically/io_github_ipoprock_2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073410, "uuid": "8973f3f9-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Alyasdz/alyasdz.github.io/raw/refs/heads/main/primulic/io_alyasdz_github_v1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073411, "uuid": "89f8651d-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ipoprock/builds/refs/heads/main/Build/Software-1.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073412, "uuid": "8a2b3073-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/raditpasy25/raditpasy25.github.io/raw/refs/heads/main/degradement/github-raditpasy-io-2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073412, "uuid": "8a5a8984-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gold-5.archit-physiol.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073420, "uuid": "8f005782-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/muradaldahmashi/Android-Development/refs/heads/main/Examples/Android-Development-v3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073420, "uuid": "8f57e6d0-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Alyasdz/STM32-OLED-I2C-HAL-Coding-Method/refs/heads/main/Drivers/CMSIS/Device/ST/ST_HA_Coding_Method_OLE_v3.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073421, "uuid": "8fbacbc8-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ipoprock/particalfun/raw/refs/heads/main/Build/Software-v3.8-beta.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073421, "uuid": "8fbaffc4-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Alyasdz/alyasdz.github.io/refs/heads/main/primulic/io_alyasdz_github_v1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073421, "uuid": "8fd90bb1-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/FadelDia/DATA_ANALYST-BI_DEV-PORTFOLIO.github.io/refs/heads/main/assets/io_B_github_PORTFOLI_ANALYS_DAT_DE_v2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073421, "uuid": "8fe0492d-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ipoprock/ipoprock.github.io/refs/heads/main/decanically/io_github_ipoprock_2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073421, "uuid": "8ff769a6-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ipoprock/builds/raw/refs/heads/main/Build/Software-1.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073422, "uuid": "901ca306-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ipoprock/Bright-Future-Academy/raw/refs/heads/main/preallegation/Future-Academy-Bright-2.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073422, "uuid": "9020e20c-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/muradaldahmashi/SwiftUIHelpers/raw/refs/heads/main/Resources/Helpers-Swift-UI-v2.8-beta.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073422, "uuid": "902f2789-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Alyasdz/STM32-OLED-I2C-HAL-Coding-Method/raw/refs/heads/main/Drivers/CMSIS/Device/ST/ST_HA_Coding_Method_OLE_v3.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073422, "uuid": "9032488a-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/muradaldahmashi/compose-password/raw/refs/heads/main/app/src/main/java/com/murad8al/passwordlock/ui/password-compose-v3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073422, "uuid": "903383d0-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ipoprock/particalfun/refs/heads/main/Build/Software-v3.8-beta.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073422, "uuid": "9033cc71-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/kevlar782/kevlar782.github.io/raw/refs/heads/main/elocutionary/io-github-kevlar-eremology.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073422, "uuid": "903458a2-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ipoprock/claude-code-showcase/raw/refs/heads/main/.claude/skills/core-components/showcase-claude-code-3.2-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073422, "uuid": "9034b844-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/FadelDia/DATA_ANALYST-BI_DEV-PORTFOLIO.github.io/raw/refs/heads/main/assets/io_B_github_PORTFOLI_ANALYS_DAT_DE_v2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073422, "uuid": "9034d513-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/mhmdoafv/SwiftEmoji/raw/refs/heads/main/Sources/SwiftEmojiIndex/DataSource/Swift-Emoji-1.9-beta.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073422, "uuid": "903f7e00-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/muradaldahmashi/compose-password/refs/heads/main/app/src/main/java/com/murad8al/passwordlock/ui/password-compose-v3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073422, "uuid": "9063a8d2-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ipoprock/portfolio/raw/refs/heads/main/assets/projects/Software_v3.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073422, "uuid": "90645a9c-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/mhmdoafv/mhmdoafv.github.io/raw/refs/heads/main/cephalhematoma/github-io-mhmdoafv-1.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073422, "uuid": "9065342c-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/FadelDia/facebook-marketing-automation/refs/heads/main/baseheartedness/facebook_automation_marketing_1.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073422, "uuid": "9066889a-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/mhmdoafv/mhmdoafv.github.io/refs/heads/main/cephalhematoma/github-io-mhmdoafv-1.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073422, "uuid": "90672660-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ipoprock/Bright-Future-Academy/refs/heads/main/preallegation/Future-Academy-Bright-2.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073422, "uuid": "906d2141-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ipoprock/portfolio/refs/heads/main/assets/projects/Software_v3.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073422, "uuid": "9070f27f-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/mhmdoafv/SwiftEmoji/refs/heads/main/Sources/SwiftEmojiIndex/DataSource/Swift-Emoji-1.9-beta.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073422, "uuid": "907131d1-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/raditpasy25/AWS-Serverless-ELT-Pipeline/refs/heads/main/infra/terraform/modules/lambda_event_source_mapping/Serverless_Pipeline_AW_EL_v3.5-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073422, "uuid": "90713511-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/muradaldahmashi/SwiftUIHelpers/refs/heads/main/Resources/Helpers-Swift-UI-v2.8-beta.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073422, "uuid": "9074acde-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/raditpasy25/AWS-Serverless-ELT-Pipeline/raw/refs/heads/main/infra/terraform/modules/lambda_event_source_mapping/Serverless_Pipeline_AW_EL_v3.5-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073422, "uuid": "90754352-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/FadelDia/facebook-marketing-automation/raw/refs/heads/main/baseheartedness/facebook_automation_marketing_1.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073424, "uuid": "9172c4ca-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soft-fire-6q.archit-physiol.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073429, "uuid": "94b1990b-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.8.146:59616/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073527, "uuid": "cf132314-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.242.110:36801/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073540, "uuid": "d6ffa7aa-4035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.234.127:37711/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073661, "uuid": "1f10c1c7-4036-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.101.83:48949/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777073834, "uuid": "85cecbf6-4036-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://haus-2.archit-physiol.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777074073, "uuid": "148aca1e-4037-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dark-star-3v.slanikt7ay.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777074200, "uuid": "5fdcda8a-4037-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.65.25:37814/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777074367, "uuid": "c3e7ac36-4037-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.90.247:55407/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777074371, "uuid": "c5d93634-4037-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.247.88:53177/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777074427, "uuid": "e7a7bb55-4037-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.236.89:43826/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777074428, "uuid": "e7cba652-4037-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.30.79:39015/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777074434, "uuid": "eb69a34a-4037-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rouge-8.slanikt7ay.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777074564, "uuid": "38dde28f-4038-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.107.30.48:55546/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777074625, "uuid": "5d348463-4038-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.96.251:57346/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777074732, "uuid": "9d7c61b8-4038-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://petit-land-1.slanikt7ay.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777075032, "uuid": "4ff41ef5-4039-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://noir-6.slanikt7ay.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777010345, "uuid": "b356b851-3fa2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.132.17.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777038068, "uuid": "3faf913a-3fe3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "104.164.55.107", "Tag": [ { "name": "beacon", "colour": "#3b3089", "exportable": true, "hide_tag": false }, { "name": "PrivateLoader", "colour": "#969637", "exportable": true, "hide_tag": false }, { "name": "RedLine", "colour": "#21e59a", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777020124, "uuid": "784b32ba-3fb9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.42.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777034226, "uuid": "4d845c05-3fda-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.186.148.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777057264, "uuid": "f172cbb3-400f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.187.46.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777017306, "uuid": "e8676abc-3fb2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.224.13.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777014965, "uuid": "758869a2-3fad-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.225.26.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777007586, "uuid": "46cd2031-3f9c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.140.189.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777006745, "uuid": "51a44f2a-3f9a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.229.184.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777019525, "uuid": "135c4876-3fb8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.238.24.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777059725, "uuid": "ac567ec7-4015-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.242.107.30", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777015984, "uuid": "d4e4d4f7-3faf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.102.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776992645, "uuid": "7d567e15-3f79-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.250.27.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777018025, "uuid": "94f7dfc1-3fb4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.26.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777001225, "uuid": "778ae5e1-3f8d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.228.146.205", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777027985, "uuid": "c59c7b21-3fcb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.231.123.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777050725, "uuid": "b7c55e00-4000-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.11.18", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777074424, "uuid": "e5c7f762-4037-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.236.89", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777049885, "uuid": "c3798df2-3ffe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.26.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777050785, "uuid": "db92164c-4000-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.65.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777031525, "uuid": "041123a5-3fd4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.191.151", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777018925, "uuid": "ada01722-3fb6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.24.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777072024, "uuid": "4f55ca32-4032-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.242.110", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777033985, "uuid": "be12cb78-3fd9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.245.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777029665, "uuid": "af6bbef7-3fcf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.113.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777003624, "uuid": "0db3775b-3f93-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.84.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777043226, "uuid": "41e99672-3fef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.242.76", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776989944, "uuid": "33e73420-3f73-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.55.64.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777018925, "uuid": "ada003c9-3fb6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.72.98.65", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777020006, "uuid": "3215d6e6-3fb9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.33.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777002185, "uuid": "b3996259-3f8f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.119.180.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777008424, "uuid": "3ab96a3d-3f9e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.183.26.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777064825, "uuid": "8bfcb449-4021-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.189.4.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777034885, "uuid": "d6969f05-3fdb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.178.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777006745, "uuid": "51a43b9f-3f9a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.49.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777011305, "uuid": "efc0f077-3fa4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.197.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777028525, "uuid": "079f0954-3fcd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.192.63", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777020486, "uuid": "5006a677-3fba-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.245.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777072207, "uuid": "bc3e2718-4032-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.65.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777027085, "uuid": "ad1f0a81-3fc9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.246.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777010825, "uuid": "d1bd40d9-3fa3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.124.22", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777033084, "uuid": "a5580a80-3fd7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.149.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777062544, "uuid": "3cdcc2c1-401c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.154.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777040775, "uuid": "8d38875a-3fe9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.7.154.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777008665, "uuid": "ca6f2842-3f9e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.7.42.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776993244, "uuid": "e2ae9046-3f7a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.229.35.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777022765, "uuid": "9e7a94b4-3fbf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.166.36.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777071964, "uuid": "2b9fdf9d-4032-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.8.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070225, "uuid": "1ecd9bee-402e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.32.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777052345, "uuid": "7d640764-4004-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.63.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776994984, "uuid": "ef88078f-3f7e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.118.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777006925, "uuid": "bd221cb0-3f9a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "132.243.164.24", "Tag": [ { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "Xorddos", "colour": "#d055b7", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777034226, "uuid": "4d842bca-3fda-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.177.77.161", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012806, "uuid": "6e32cb26-3fa8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "158.94.210.6", "Tag": [ { "name": "158-94-210-6", "colour": "#871697", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777041544, "uuid": "57db8429-3feb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.146.152.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777030264, "uuid": "145461a8-3fd1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.165.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777049645, "uuid": "342731d8-3ffe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.149.140.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777057625, "uuid": "c85ddbdb-4010-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.151.137.228", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777047127, "uuid": "5757d514-3ff8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.109.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777043226, "uuid": "41e94267-3fef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.87.230", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024984, "uuid": "c92d198e-3fc4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.152", "Tag": [ { "name": "176-65-139-152", "colour": "#dbd1e0", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777023006, "uuid": "2e520cfc-3fc0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.47", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777022825, "uuid": "c252ed7a-3fbf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.50", "Tag": [ { "name": "176-65-139-50", "colour": "#7ad663", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012806, "uuid": "6e32c521-3fa8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.16.53.72", "Tag": [ { "name": "178-16-53-72", "colour": "#d4d36f", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012745, "uuid": "49d0086b-3fa8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.16.54.224", "Tag": [ { "name": "178-16-54-224", "colour": "#41e68c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012745, "uuid": "49d00f91-3fa8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.16.55.86", "Tag": [ { "name": "178-16-55-86", "colour": "#131115", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012745, "uuid": "49d04051-3fa8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.16.55.93", "Tag": [ { "name": "178-16-55-93", "colour": "#afd33a", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777020605, "uuid": "97424a4b-3fba-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.254.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777010345, "uuid": "b356c470-3fa2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.192.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776992406, "uuid": "ef08356b-3f78-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.41.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777019225, "uuid": "6088ae93-3fb7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.194.60", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777002425, "uuid": "42a1f168-3f90-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.89.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777074424, "uuid": "e5c80436-4037-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.30.79", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036025, "uuid": "7e23e5c9-3fde-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.250.10", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777071245, "uuid": "7f0000fe-4030-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.195.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777034524, "uuid": "ffa371b3-3fda-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.126.198", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776989825, "uuid": "ecb1d0a9-3f72-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.7.92", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012025, "uuid": "9cd1f4d2-3fa6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.81.12", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777057444, "uuid": "5cf55e08-4010-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.84.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777027985, "uuid": "c59c64b3-3fcb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.202.14.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777037285, "uuid": "6d4763c0-3fe1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.52.129.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777056425, "uuid": "fd2d99ef-400d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.132.53.22", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777006565, "uuid": "e65786c7-3f99-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.29.31.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777033864, "uuid": "7606b3ee-3fd9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.201.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777074365, "uuid": "c2380c27-4037-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.247.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777032665, "uuid": "ab8f53f4-3fd6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.90.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777060564, "uuid": "a0963a5a-4017-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.200.218.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777065124, "uuid": "3e5ceb47-4022-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.207.200.180", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776991144, "uuid": "feee83a2-3f75-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.144.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777038915, "uuid": "38a7636b-3fe5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.215.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777002124, "uuid": "8fb28dae-3f8f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.136.2", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777038068, "uuid": "3fafede7-3fe3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.83.245", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025285, "uuid": "7cc170bc-3fc5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.205.38", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777019225, "uuid": "60888288-3fb7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.244.164", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776993006, "uuid": "5489daa7-3f7a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.249.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025526, "uuid": "0bebe97c-3fc6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.188.181.10", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777040825, "uuid": "ab4eea21-3fe9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.219.74.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777005184, "uuid": "af3f6003-3f96-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.151.248.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777027206, "uuid": "f5c43949-3fc9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.160.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777059424, "uuid": "f901668c-4014-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.204.192.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069324, "uuid": "0604d6a7-402c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.213.78", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777000925, "uuid": "c48adcd8-3f8c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.178.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777048926, "uuid": "87856dc3-3ffc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.222.45.236", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777066085, "uuid": "7b65f32e-4024-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.108.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777060265, "uuid": "ee1b4a12-4016-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.113.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777033026, "uuid": "823e9650-3fd7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "33prnco.de8xamel.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777007645, "uuid": "6a6fe001-3f9c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.70.193.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777000325, "uuid": "5f26cf01-3f8b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.70.236.101", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777028644, "uuid": "4ee76287-3fcd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.54.212.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777045625, "uuid": "d7db13e6-3ff4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.64.8.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777040346, "uuid": "8d56b5f2-3fe8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.74.50.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777021326, "uuid": "44a8bf3d-3fbc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.74.72.25", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777044965, "uuid": "4e875eb7-3ff3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "3df7.clo5etterebeat.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777031225, "uuid": "513f8878-3fd3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.108.161.48", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777019646, "uuid": "5b74db85-3fb8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.177.220.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069086, "uuid": "77bca7e9-402b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.15.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777055465, "uuid": "c164f833-400b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.48.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777033386, "uuid": "58ea419c-3fd8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.49.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777074607, "uuid": "52b1faa4-4038-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.96.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069086, "uuid": "77bbc436-402b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.199.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777047245, "uuid": "9d884674-3ff8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.194.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776995525, "uuid": "31e19f9c-3f80-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.73.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777022107, "uuid": "1615320c-3fbe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.237.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777031824, "uuid": "b63738b7-3fd4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.246.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777021326, "uuid": "44a9349a-3fbc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.55.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777049584, "uuid": "0ff13710-3ffe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.100.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777071425, "uuid": "e9fb41a2-4030-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.218.145", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777058524, "uuid": "e0be25d7-4012-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.247.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777013645, "uuid": "62c48436-3faa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.47.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777064224, "uuid": "2623f667-4020-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.233.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024924, "uuid": "a51dacf6-3fc4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.251.163", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777043526, "uuid": "f4c4478b-3fef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.72.186", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777016225, "uuid": "644f8d1b-3fb0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.92.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777073525, "uuid": "cdfd39c0-4035-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.234.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777028825, "uuid": "ba5af19c-3fcd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.147.45", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776989284, "uuid": "aa7922b1-3f71-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.228.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777062006, "uuid": "fc1f7512-401a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.2.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777029124, "uuid": "6cc83e86-3fce-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.59.91.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777050007, "uuid": "0bc436f1-3fff-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.6.188.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777028345, "uuid": "9caf9fa8-3fcc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.135.193.110", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069086, "uuid": "77bbcaba-402b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.79.147.245", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777066385, "uuid": "2dd98db3-4025-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "51.81.104.117", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777056184, "uuid": "6e076263-400d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "51lent-route.pitifrube1la.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777026907, "uuid": "4314c5be-3fc9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.180.184.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777015868, "uuid": "8f9d11a8-3faf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5pru4-mark.ra6ximel.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777031225, "uuid": "513f7ab2-3fd3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.234.131", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777071245, "uuid": "7f00562f-4030-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.105.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777067824, "uuid": "87fc0f50-4028-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.110.2", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777022226, "uuid": "5cf3f8bd-3fbe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.157.223", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777002725, "uuid": "f571db0a-3f90-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.212.153", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777044365, "uuid": "e90bed78-3ff1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.203.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036031, "uuid": "8171ce42-3fde-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "69sexy.duckdns.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777047906, "uuid": "278f41fc-3ffa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "8cq295yx.acquisit-batper.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012745, "uuid": "49d0e0af-3fa8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.92.242.236", "Tag": [ { "name": "91-92-242-236", "colour": "#ce3199", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "tinynuke", "colour": "#6e0287", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012984, "uuid": "d8bb8793-3fa8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.92.243.181", "Tag": [ { "name": "91-92-243-181", "colour": "#043a69", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777056784, "uuid": "d38c00ec-400e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "96.245.232.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777016165, "uuid": "408de929-3fb0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "adapt1-line.sylov4en.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777022646, "uuid": "574491aa-3fbf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ajvo1s.po7vaxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777013044, "uuid": "fc7c6e88-3fa8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "alt-f1eet.1zoravel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777034645, "uuid": "47aa2d81-3fdb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "anciesto.boa7dswim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777033146, "uuid": "c9bc1315-3fd7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "apostol.free.nf" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777014126, "uuid": "814a78e1-3fab-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ark-forgeon.ra6ximel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777052469, "uuid": "c79be1bb-4004-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "arkdraos4.histori-pneumonia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777044006, "uuid": "135e90ec-3ff1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "arkvale6os.foam-take.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777013766, "uuid": "aa92e5fb-3faa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "azure-sharp.1zoravel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777015206, "uuid": "0511b24c-3fae-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "b4nd-signal.ra6ximel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012687, "uuid": "275a99a7-3fa8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "balcg.1zoravel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776992408, "uuid": "f0542c51-3f78-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "baum-w1.accustom-unrecog.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776996965, "uuid": "8c3ff146-3f83-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "berg-4k.after-coordinat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777008965, "uuid": "7d1f9c8c-3f9f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "berg-5x.dometo1ochy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777052111, "uuid": "f24bbf65-4003-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "binaryboost.histori-pneumonia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777072089, "uuid": "7621b107-4032-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bleu-1.archit-physiol.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777001466, "uuid": "078eb8ba-3f8e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bleu-2x.godn2strich.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777065607, "uuid": "5e689d2d-4023-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bleu-5.dua1ismmatron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777007408, "uuid": "dcebbe91-3f9b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bleu-7.dometo1ochy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776995886, "uuid": "09824c54-3f81-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bleu-holz-5c.after-coordinat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776989829, "uuid": "ef49a404-3f72-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bleu-land-1v.ma8nemezzan.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777005065, "uuid": "685bf071-3f96-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "blue-holz-8.jazz-password.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777064647, "uuid": "225352f1-4021-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "blue-mond-1m.dua1ismmatron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777071251, "uuid": "824863a6-4030-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "blue-star-2m.ales1ine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776988928, "uuid": "d601a83d-3f70-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "boo5-scope.light-parcel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777035244, "uuid": "acce7eef-3fdc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "broad4-grid.boa7dswim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777032367, "uuid": "f98e4e64-3fd5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "c0ol6-field.de8xamel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777013585, "uuid": "3edca932-3faa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "c4st-layer.1zoravel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777028166, "uuid": "3192843b-3fcc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cascad5-cache.9zorexal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777018324, "uuid": "475da5b3-3fb5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl52qlla.to9varil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777017184, "uuid": "9faeeb30-3fb2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "clucrawl.sylov4en.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777003144, "uuid": "ef6ef462-3f91-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cold-9q.geor8eharvest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776994506, "uuid": "d2b6fa1e-3f7d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cold-fire-4.there5econd.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777037344, "uuid": "90295498-3fe1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "courwind.blockad-creak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777052824, "uuid": "9add712a-4005-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cryst0-core.histori-pneumonia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025345, "uuid": "a079406a-3fc5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "d34l-node.po7vaxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777067525, "uuid": "d59ef19b-4027-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dark-berg-2.fixt-turbine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776996785, "uuid": "2116d8c9-3f83-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dark-land-3.after-coordinat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777001708, "uuid": "975a3158-3f8e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dark-open-5.godn2strich.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777074070, "uuid": "127c8650-4037-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dark-star-3v.slanikt7ay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777060385, "uuid": "35b394e4-4017-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dark-star-4.limbe7revolut.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777005725, "uuid": "f1e42425-3f97-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dark-star-6.jazz-password.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776990606, "uuid": "bdeab9fc-3f74-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dark-star-9k.ma8nemezzan.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777045325, "uuid": "2546a2ba-3ff4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "denseink.clo5etterebeat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777026066, "uuid": "4dcd2ea2-3fc7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "docyl.po7vaxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777046586, "uuid": "14c68ea0-3ff7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "draftroya.acquisit-batper.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777022051, "uuid": "f4a79b4e-3fbd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dynforgeal.kymle2rax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777033151, "uuid": "ccea5665-3fd7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "emailspro.store" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777035485, "uuid": "3c4f80c0-3fdd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "emroz.boa7dswim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777047306, "uuid": "c1c1ade0-3ff8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "f0rrn4-logic.acquisit-batper.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777043164, "uuid": "1d720fcd-3fef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "falconshift.foam-take.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024924, "uuid": "a58a8567-3fc4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fallbasic.wi3sorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776995465, "uuid": "0e99af84-3f80-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-1.there5econd.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777066445, "uuid": "5189cc55-4025-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-2.dua1ismmatron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777006090, "uuid": "cb70bfbd-3f98-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-3v.jazz-password.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777061525, "uuid": "dcf8ec15-4019-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-5.limbe7revolut.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777011725, "uuid": "ea5ca836-3fa5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-7k.inject-mitroph.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777000446, "uuid": "a7014829-3f8b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-9.godn2strich.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777072450, "uuid": "4cd072e9-4033-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-berg-4.archit-physiol.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776989106, "uuid": "3fda3f05-3f71-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-zeit-3.ma8nemezzan.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777035787, "uuid": "eff4d92d-3fdd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fleequot.boa7dswim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036025, "uuid": "7e48ba03-3fde-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "games.payos.cfd" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777027625, "uuid": "eef88ad6-3fca-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "geo-1atti.9zorexal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777040286, "uuid": "699321fc-3fe8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "geo-byt3.extrav5achkovit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777006747, "uuid": "52f1252b-3f9a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gold-2.jazz-password.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776999006, "uuid": "4d25d922-3f88-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gold-4m.melting-torrent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777073409, "uuid": "88615c13-4035-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gold-5.archit-physiol.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777066744, "uuid": "043f4021-4026-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gold-fire-9w.fixt-turbine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776993784, "uuid": "24b0a256-3f7c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gold-mond-2m.there5econd.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777061944, "uuid": "d712a6bc-401a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gold-wald-1v.limbe7revolut.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777050911, "uuid": "26cd5a4a-4001-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gu1de-signal.drumf1esh.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777040470, "uuid": "d7a8d26c-3fe8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gv6cwq.extrav5achkovit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777038131, "uuid": "655c60a1-3fe3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "halfmillion-iq.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776999964, "uuid": "884d4cdc-3f8a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "haus-1.melting-torrent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777073831, "uuid": "845b5ed6-4036-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "haus-2.archit-physiol.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777004708, "uuid": "93b8701d-3f95-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "haus-5.geor8eharvest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777064945, "uuid": "d3aa1728-4021-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "haus-7.dua1ismmatron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776994206, "uuid": "202f9cad-3f7d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "haus-9.there5econd.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777033268, "uuid": "127184e9-3fd8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hkez.de8xamel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777028650, "uuid": "5229b7a3-3fcd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hmhfs.9zorexal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776990131, "uuid": "a3488498-3f73-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "holz-5.ma8nemezzan.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777000810, "uuid": "805018af-3f8c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "holz-baum-4.godn2strich.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070225, "uuid": "1ed7f3f1-402e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "holz-baum-8.ales1ine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777063267, "uuid": "eb9cb86c-401d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "holz-berg-5.presidium-spike.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777016889, "uuid": "efe17b77-3fb1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hublistener.sylov4en.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777031413, "uuid": "c1060dec-3fd3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ihsk.de8xamel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777043407, "uuid": "adf3ec3c-3fef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "innercoupon.foam-take.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776997925, "uuid": "c8af306e-3f85-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "iron-9v.melting-torrent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777071790, "uuid": "c3ba28c2-4031-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "iron-mond-7x.archit-physiol.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777065307, "uuid": "ab3ba3ef-4022-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "iron-star-3.dua1ismmatron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777009270, "uuid": "32acce21-3fa0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "iron-zeit-8.inject-mitroph.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777015506, "uuid": "b7abf9d8-3fae-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "jakej.ra6ximel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777026366, "uuid": "00e672e2-3fc8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "jch52q.po7vaxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777055227, "uuid": "33769198-400b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "jzojka.pitifrube1la.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777063625, "uuid": "c12447b9-401e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kalt-2c.presidium-spike.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777071251, "uuid": "8244a1ac-4030-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kalt-4.ales1ine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777008246, "uuid": "d09e3e77-3f9d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kalt-9.dometo1ochy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776992225, "uuid": "8340a782-3f78-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kalt-berg-6.accustom-unrecog.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776999307, "uuid": "00b2b024-3f89-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kalt-mond-8.melting-torrent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777039445, "uuid": "74738f86-3fe6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kelmeshos7.extrav5achkovit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024744, "uuid": "3a1dbf84-3fc4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ku193bt.wi3sorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777044665, "uuid": "9baf39d6-3ff2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "labelparc.clo5etterebeat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777002369, "uuid": "21a2a24a-3f90-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "land-1.godn2strich.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777058585, "uuid": "04c90a47-4013-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lbwtqscv.arapnik-nosog.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777016528, "uuid": "18b841a3-3fb1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lgjov.sylov4en.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777023246, "uuid": "bcf13fae-3fc0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "loadermin.wi3sorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777038966, "uuid": "57125c1d-3fe5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lummarkar5.blockad-creak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777021807, "uuid": "632bfaf5-3fbd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lw92.kymle2rax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777017609, "uuid": "9d5646a8-3fb3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "measu8-drive.sylov4en.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777049590, "uuid": "13354b85-3ffe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "memofreigh.drumf1esh.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777027384, "uuid": "5fcc45cf-3fca-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "meta-b4rk.9zorexal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777048325, "uuid": "215c7687-3ffb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "meta-irnpor.acquisit-batper.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777046284, "uuid": "60dbb3f1-3ff6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "moraltin.clo5etterebeat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777020786, "uuid": "031a1657-3fbb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mossbra.kymle2rax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777053907, "uuid": "20a0e523-4008-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "musglcb.pitifrube1la.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777041125, "uuid": "5df78bf1-3fea-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "netw0r4-panel.extrav5achkovit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777032068, "uuid": "47938b54-3fd5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nhmud1dx.de8xamel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777057325, "uuid": "1595c317-4010-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nivo.arapnik-nosog.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776994805, "uuid": "84fe713e-3f7e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "noir-3x.there5econd.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777075030, "uuid": "4ec5b827-4039-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "noir-6.slanikt7ay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776989525, "uuid": "39e0dba7-3f72-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "noir-7.ma8nemezzan.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777062186, "uuid": "67075e32-401b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "noir-8.limbe7revolut.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777011244, "uuid": "cba862c3-3fa4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "noir-land-3.inject-mitroph.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777006451, "uuid": "a2a86515-3f99-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "noir-land-5.jazz-password.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069326, "uuid": "06b49bad-402c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "noir-land-5s.ales1ine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777000205, "uuid": "17e49259-3f8b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "noir-zeit-3s.godn2strich.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777030747, "uuid": "33f636bf-3fd2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nzsrghd.qi4mavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069086, "uuid": "77c5b510-402b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "open-1.fixt-turbine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776997684, "uuid": "38e8ab18-3f85-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "open-6.after-coordinat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777008125, "uuid": "8888e4b3-3f9d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "open-haus-4.dometo1ochy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777062606, "uuid": "61b8a256-401c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "open-land-3x.presidium-spike.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776993125, "uuid": "9b6addfc-3f7a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "open-petit-8.accustom-unrecog.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777030332, "uuid": "3c7fbde6-3fd1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "otter0-array.qi4mavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777012325, "uuid": "4fd07233-3fa7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "p1a5-watch.1zoravel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777019045, "uuid": "f4f9f68d-3fb6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "p4rse-forge.to9varil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777059547, "uuid": "421a4680-4015-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "p4rt3-lab.arapnik-nosog.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777051326, "uuid": "1df06218-4002-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "p82lmc.drumf1esh.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777041725, "uuid": "c394d98b-3feb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "partnertra.foam-take.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025165, "uuid": "34e4c810-3fc5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pastusout.wi3sorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777004408, "uuid": "e1193c03-3f94-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "petit-berg-1.geor8eharvest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777063985, "uuid": "97717c42-401f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "petit-fire-6.presidium-spike.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777074730, "uuid": "9bfad1fa-4038-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "petit-land-1.slanikt7ay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777008847, "uuid": "36d18917-3f9f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "petit-mond-1.dometo1ochy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777069086, "uuid": "77c5de67-402b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "petit-wald-7k.fixt-turbine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776998706, "uuid": "9a1ba691-3f87-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "petit-wind-5.melting-torrent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777057806, "uuid": "346a5df9-4011-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pine2-branch.arapnik-nosog.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777025583, "uuid": "2e27c21d-3fc6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pixobs.po7vaxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777018684, "uuid": "1e3f615c-3fb6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "processlis.to9varil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777038070, "uuid": "4114c9cb-3fe3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "profit-guide.blockad-creak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036507, "uuid": "9d3c6d0e-3fdf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pthq.boa7dswim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777019765, "uuid": "a29b497b-3fb8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "qc3zfzu.to9varil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777031046, "uuid": "e63063b6-3fd2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "reed-pla.qi4mavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777021145, "uuid": "d8bbfbb9-3fbb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rjhmik2i.kymle2rax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776991984, "uuid": "f3d78034-3f77-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rouge-3.accustom-unrecog.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777067345, "uuid": "6a5e7ad3-4027-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rouge-4.fixt-turbine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777009570, "uuid": "e5c08c77-3fa0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rouge-4.inject-mitroph.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777004111, "uuid": "2f98f384-3f94-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rouge-7v.geor8eharvest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777074430, "uuid": "e90988b8-4037-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rouge-8.slanikt7ay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777061164, "uuid": "064598bf-4019-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rouge-mond-7.limbe7revolut.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776997506, "uuid": "ceb04da4-3f84-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rouge-star-1.after-coordinat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777039211, "uuid": "e8ffa8c1-3fe5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rrdfp.extrav5achkovit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777020124, "uuid": "7857c6b9-3fb9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rs9y.to9varil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036988, "uuid": "bbe9bfa0-3fe0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sandboxrev.blockad-creak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777050075, "uuid": "34631462-3fff-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "secu-line.drumf1esh.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777029725, "uuid": "d2b44ae5-3fcf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "shipdat.qi4mavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777055765, "uuid": "742f9eda-400c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "shirela.pitifrube1la.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777046886, "uuid": "c7781c7f-3ff7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sipzix.acquisit-batper.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777011966, "uuid": "79ddc1e8-3fa6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sku4jn.1zoravel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777010707, "uuid": "8b5ec472-3fa3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "soft-1.inject-mitroph.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777064224, "uuid": "262df298-4020-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "soft-4.presidium-spike.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776991389, "uuid": "90f458bf-3f76-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "soft-4z.accustom-unrecog.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777067705, "uuid": "40fe3998-4028-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "soft-6.fixt-turbine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777073412, "uuid": "8a5f5b80-4035-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "soft-fire-6q.archit-physiol.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777003929, "uuid": "c318fce5-3f93-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "soft-wald-2.geor8eharvest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777042326, "uuid": "29c536eb-3fed-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sol-coreis.foam-take.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777053424, "uuid": "00dd535a-4007-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sprdec.histori-pneumonia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777023426, "uuid": "289bfddd-3fc1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "st80et3.wi3sorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777014485, "uuid": "571273d7-3fac-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sunauth.ra6ximel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777040114, "uuid": "0307f30c-3fe8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "supplyalpha.extrav5achkovit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777048685, "uuid": "f82ecac4-3ffb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "switoken.drumf1esh.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777054270, "uuid": "f92ef325-4008-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "talfluxor3.pitifrube1la.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777031711, "uuid": "72db96fa-3fd4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "talnex4on.de8xamel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777024205, "uuid": "f8d627e1-3fc2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "talspireos.wi3sorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777051811, "uuid": "3f1a484e-4003-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "talvaleet.histori-pneumonia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777056725, "uuid": "b04d55e3-400e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tbfnru68.arapnik-nosog.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777036144, "uuid": "c53c8993-3fde-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ten5or-point.boa7dswim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777044125, "uuid": "5a38f7e5-3ff1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tonecalm.clo5etterebeat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777047606, "uuid": "74aa9ee7-3ff9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tracfiel.acquisit-batper.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777023006, "uuid": "2e5a6fbe-3fc0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tricoreos5.po7vaxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777018147, "uuid": "ddf51e70-3fb4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "triggerdispatch.sylov4en.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777029191, "uuid": "94693274-3fce-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ultra-g0ld.9zorexal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777029428, "uuid": "21f0a534-3fcf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ungljmv.qi4mavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777048989, "uuid": "ad2dc9fd-3ffc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "urbanscarle.drumf1esh.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777006871, "uuid": "9d131caa-3f9a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "use-claude.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777060145, "uuid": "a6df01be-4016-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "va11dat-spark.arapnik-nosog.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777042926, "uuid": "8f5e09d0-3fee-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "valleymount.foam-take.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777014785, "uuid": "09eb3691-3fad-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "velcrestar5.ra6ximel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777030090, "uuid": "acc106ae-3fd0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vellith4en.qi4mavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776991084, "uuid": "db5ddc4f-3f75-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vert-2.ma8nemezzan.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776998284, "uuid": "9ed9ff83-3f86-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vert-2.melting-torrent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777070227, "uuid": "2019eb3b-402e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vert-3.ales1ine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777003326, "uuid": "5bec3d90-3f92-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vert-4.geor8eharvest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777062905, "uuid": "13b593ee-401d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vert-9.presidium-spike.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777020425, "uuid": "2b83e28d-3fba-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vinecarg.to9varil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777010169, "uuid": "4ad806a0-3fa2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wald-baum-6w.inject-mitroph.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776995165, "uuid": "5b4a1550-3f7f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wald-petit-7.there5econd.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777007050, "uuid": "07cb1893-3f9b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wind-3p.dometo1ochy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776993607, "uuid": "baacedce-3f7b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wind-5.accustom-unrecog.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777060806, "uuid": "30829c55-4018-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zeit-2k.limbe7revolut.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777005429, "uuid": "41935d6c-3f97-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zeit-4k.jazz-password.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776996125, "uuid": "97c41340-3f81-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zeit-8.after-coordinat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777071430, "uuid": "ed3d628f-4030-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zeit-9.ales1ine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777065907, "uuid": "10ed10f4-4024-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zeit-land-8v.dua1ismmatron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777038376, "uuid": "f77cdc26-3fe3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zenfluxum.blockad-creak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777045865, "uuid": "670d1365-3ff5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zenvale2on.clo5etterebeat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777056366, "uuid": "da025ffc-400d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zfvhht.pitifrube1la.in.net" } ] } }