{ "Event": { "published": true, "date": "2026-03-04", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-03-04", "timestamp": 1772669728, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "83a1c3ab-c890-4f73-9964-b45667bf195c", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1772584758, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772584758, "uuid": "d24fd527-ef9e-4591-b973-a6b37598e7b1", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772584758, "uuid": "69b5e4ff-b5c4-4333-823d-75489e1449e2", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772584758, "uuid": "551a8683-4ea7-4a4f-b683-6d26dd8e5433", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772584758, "uuid": "6657f055-fdd1-497a-a3e4-7475d98954a6", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772584758, "uuid": "a43d207a-c975-478b-841a-a9e4888c12fd", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772585368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772585368, "uuid": "02743a2c-6302-4494-a5c0-b31067741087", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772585368, "uuid": "73764288-f66e-44bd-a4a2-6e4cb92423b8", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772585368, "uuid": "a6b8b329-5915-4cfc-9069-5164d9090237", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772585368, "uuid": "2a3c61ca-6834-4d08-8da5-bca258f1efee", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772585368, "uuid": "8f646975-f9a8-4d4a-8c0e-792ebced02cb", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1772588903, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772588903, "uuid": "0d294557-5b24-4638-a655-a87caaa3aecb", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772588903, "uuid": "198836d1-e6a6-4eeb-9fa4-f08f149f2aa9", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772588903, "uuid": "73c9a5ac-af89-4bc6-9036-9a795a8e2906", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772588903, "uuid": "7d55e3d5-c6a0-4aa5-bed5-69b7f72db001", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772588903, "uuid": "87708950-9805-48bf-b1b2-f5c881ab6565", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd917c8a-1771-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772591377, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772591377, "uuid": "5d405241-3a7a-43d1-a156-dda05d1a04ac", "comment": "Malware payload", "value": "c1169e2d837d348a65b2ff2932107505", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772591377, "uuid": "dd882e3e-8080-4d5a-9760-940bab24b8d5", "comment": "Malware payload", "value": "7f41d537dddecbfdbf9d9bf1f27878f6dccd35c86f215153400429b3dcff7554", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772591377, "uuid": "2b5ceb9c-c96a-4e02-9583-134d6de934ae", "value": "T1B78308327589582A210B028FD263336C70EFD8E2D611E5B6F6F922344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772591377, "uuid": "2f3088f3-9fdc-4007-8b0c-21664eca755a", "value": "1536:XJyp/QdMqpYJKNoCtpxD3t2ZSDXpdyr2pbnEWaDVN/:XEKltp9t2SX/yr2pbEWCVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772591377, "uuid": "359c65ad-feaf-4b46-88d9-1a24d93f0ea2", "value": 85051, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772591377, "uuid": "3486cc1e-50d0-43a5-95a7-b40ea56309fd", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772595318, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772595318, "uuid": "d1a5d744-842b-4b8d-a532-196044c25d98", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772595318, "uuid": "f7e316c4-4bd7-4e0d-a98b-e7e53a7afa54", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772595318, "uuid": "1fdb68fd-ae4e-4c51-8d0d-54da3aedcf87", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772595318, "uuid": "d65c7534-2dff-4328-80df-6332b9f0e28f", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772595318, "uuid": "e9b99bf8-f33e-46d4-ab02-3a3019609576", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "369c9261-178c-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772602640, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772602640, "uuid": "35b2e9dd-7b14-4bcc-8a74-5a03ec4320a7", "comment": "Malware payload (Mirai)", "value": "b859843ccf22695afb7c49241344d5cd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772602640, "uuid": "ca8dfb54-2108-4391-a7a5-d90db109a3fa", "comment": "Malware payload (Mirai)", "value": "76b5f56cc4b064f3b247b1eddd4e40ab8245705a02dd02a6501323dd1645017d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772602640, "uuid": "6ced5630-dbc2-4fbc-9772-d3929036d1ce", "value": "T19C33F14DF1ABD5EEC54E6034486FB35EADB295397140C7253AD46263E1FEE0C11346", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772602640, "uuid": "8c8155be-0263-4794-80a2-dc097d072634", "value": "1536:XXgII7xtVj/Xm7UwXFJMp3JKsVqL34Knouy8Ey1:/I7ZzWNJMUcSout3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772602640, "uuid": "56f2ca6f-eac0-40b9-a473-89a6bd6bb604", "value": 54044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772602640, "uuid": "1713ca7d-409d-411b-a29a-3781e30135ec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "369cada5-178c-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772602640, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772602640, "uuid": "ce0bdb8b-883d-4384-b289-d79c55f16adb", "comment": "Malware payload (Mirai)", "value": "0db9bc32220830c8aa10d9c8ad376a6a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772602640, "uuid": "71fa2df3-b578-4849-8b29-082ac15a754d", "comment": "Malware payload (Mirai)", "value": "9d328ab9679c785c413beb9fd4e218c83381c4889d7d4025b1fec7f415107aa1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772602640, "uuid": "755b9f62-0620-4d34-8c52-61478eb9ca97", "value": "T1A4630202531A6448E600C0BFE48C6B8577991EB5B29D70970F85DA3CA1EED091DBBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772602640, "uuid": "6e757720-0edb-4737-a012-e9b29834b389", "value": "1536:7EeO3P674DTgkfxqjBss0R+d0uFMMDnlgw9M+PUze0OikYTVxlLm:7Ef3PpfgsYms0u3FBDh9FPUebzYTVnLm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772602640, "uuid": "a138a3c0-77a6-4756-9091-dc7773814a3c", "value": 69896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772602640, "uuid": "59f221e7-8266-4fbb-b89d-e0cbe08b666c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "369dccac-178c-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772602640, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772602640, "uuid": "917b5c98-abb2-44f2-a437-6cdd2ca38805", "comment": "Malware payload (Mirai)", "value": "a37a72bebc22a8d7aee9311e5360ae81", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772602640, "uuid": "bc60580c-df58-4284-96e7-bec807347ccf", "comment": "Malware payload (Mirai)", "value": "537a21c61a29303415080eddab4a70ade4907f744422f35a7c407fc436d08466", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772602640, "uuid": "b8195532-2a24-4254-a269-8178f7ab4d4c", "value": "T1D38312C6A913B98252F8CCF0353EBB66DED44E38CA4544A782D6C4DC1EB58397AE74", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772602640, "uuid": "77343a7c-e9b9-4d07-bf2b-81850a35127e", "value": "1536:UbhowzM5PfD9ZyHzxzwl1gA7WYFmgdY67h5bXKnYMLn9f68E4BNIX5OTkkNPeS18:Ubnzmfx4TxzPAzkgB7jXKnhLnVZE4B2D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772602640, "uuid": "ac6fac88-e1f0-42de-b042-4685a5640e14", "value": 87188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772602640, "uuid": "8b09f4d4-90d4-4019-ae89-40bd40d90221", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "369df071-178c-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772602640, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772602640, "uuid": "de46798a-b7bb-497e-9d63-3e60d90042a3", "comment": "Malware payload (Mirai)", "value": "7d5f5af671d6cb6723f8c4770c700623", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772602640, "uuid": "254ec77e-1290-4adc-a5f7-c5698a2dbeb1", "comment": "Malware payload (Mirai)", "value": "f9a9d9eda1bdf8049c2c433ac9d908d60665b79cb8ad2d001b37b91cac456dc3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772602640, "uuid": "a2c4c2c4-7222-4852-9d6d-1d82e21c6016", "value": "T1EAE2E179A555E663E7B04C37CB34DA47C5E40378E1F9101231842E9CAAEC88669F76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772602640, "uuid": "8c8358e3-3f56-4d3d-87e0-148f15dd6fa2", "value": "768:/qox/ZCG1iNrWteoZ7PWvCNGyG8wmtHFEfmnXMRs3Uoz/:yoxRCG4EeoZ7O6NGtbm4mnXtz/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772602640, "uuid": "0bd3245f-aaa1-4a6e-86ed-5d6506edc3c3", "value": 31352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772602640, "uuid": "d163939b-7aeb-4b46-960c-a3d682f50df7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "369e7103-178c-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772602640, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772602640, "uuid": "462a29d0-92e6-4666-b98c-dcc5746cd2ab", "comment": "Malware payload (Mirai)", "value": "441381af020662a0d75e4a55215202a7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772602640, "uuid": "b4c1a2b6-2d79-4982-9dd8-3b61a9b3eea9", "comment": "Malware payload (Mirai)", "value": "8ebd589d1536d3d7082f8e4806796992829534a472858412773815b0c14866b5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772602640, "uuid": "cf6d02f1-7601-49d5-92d2-dcf7e6f9145a", "value": "T1017329DBF800DD7DF80ED77B44530A0AB270A79106931B36635BBA67FD321A55822F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772602640, "uuid": "c415a7fa-93b7-4253-9c21-a85e380ceb92", "value": "1536:z3OL3wr34Qu3EhvOy0sxom5zFHAZWp6wtwb48FyRXFORZkRawHUzN6NzbotcuObI:z3OL3wr34Qu3EhvOybxomPAcp6wtwfyU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772602640, "uuid": "2989ec9c-bcde-4c65-959d-6da8ffb42642", "value": 80340, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772602640, "uuid": "5f4f71c1-5964-4d5b-a144-340e3f9f8d4f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "369ef66d-178c-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772602640, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772602640, "uuid": "dda20585-2cf5-4b0b-860e-30f483f368e6", "comment": "Malware payload (Mirai)", "value": "cf0a52d48117dc360418974aaaa01e4b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772602640, "uuid": "d0e7c132-f271-4e1d-9b23-5b78f068b635", "comment": "Malware payload (Mirai)", "value": "86cb159b5ae4e8abb23ca3bf156ea060ffcdff5a13f1db6d9e151109d2b31b1a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772602640, "uuid": "03b993e9-6d5d-4563-9d69-076ac670f94c", "value": "T1CE6302A1061D54A7FE82C0786ABF1B92AE5E0F1D6051E18774547BC3AC11BB7B00BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772602640, "uuid": "ad7fa323-9a57-4532-b308-703574a98d8a", "value": "1536:flEVq18RPFFlbO3voRAP2HwbO6iqiwEyJk502CLGc6xUyiKVJu/:flj0zlbO3voTwi6iqityoRCLr9yLVQ/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772602640, "uuid": "0e5d3a7d-2d8b-4d1b-8cf2-89d52cf8245b", "value": 70404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772602640, "uuid": "f84315fb-1e80-4fb7-9b5d-fbb21df5e70d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "36a16e9e-178c-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772602640, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772602640, "uuid": "ce73cefe-c924-4ee8-9d21-a85d243c2222", "comment": "Malware payload (Mirai)", "value": "1b32c8699ee2b828eccea67fea5e8baf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772602640, "uuid": "1d98bde3-939f-47a0-995f-99c44d211a69", "comment": "Malware payload (Mirai)", "value": "ffc33a5918e23b96f28353cb5f5b84a5906c39d7fa5843d8d867360738109652", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772602640, "uuid": "66a91e05-936f-4f7e-bc0d-5db535efe8f9", "value": "T18F53AE77C8396E64D25581B0B8748E792B53F88482571FFE1A99C27A8047EECF6483", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772602640, "uuid": "e113e825-db70-4967-9b8b-d0ecb2ea2c65", "value": "1536:caCwtuAPFqcgdEcVeKU3AwHup+CSXHld5Zo:c58PMcgakRUHup+5FPe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772602640, "uuid": "68f15058-2f5f-4f97-a630-6618196fcdf1", "value": 62948, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772602640, "uuid": "e2d45e0e-17f8-423c-848c-5f29549de7ec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "36a7a615-178c-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772602640, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772602640, "uuid": "94faa955-b54c-4efc-8aa8-abd25faf861a", "comment": "Malware payload (Mirai)", "value": "fce722c9edc0771cab68d4c3da5a88cb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772602640, "uuid": "86f75e1a-c42e-4fff-b58d-35be9ee46ded", "comment": "Malware payload (Mirai)", "value": "c6b86164d948a3a8abd9c990f55592c01a9917b0fa188eda80cabd5c579bcdc2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772602640, "uuid": "c10e8955-35c3-4f64-8ae2-ec71979a6406", "value": "T1C9F38D72C8387EA8D1A4D178B0719A791F83A8A041571FBF5EE6C2764087D8CFA097", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772602640, "uuid": "4a4d02e5-eaeb-41e1-97b4-f8fe204ee642", "value": "3072:3pP1IxuM/4N+ZeNeBqmDlNCPVWiKtnDWgqKMelp2:3pPywN4DlNCdH8SgUeX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772602640, "uuid": "8ee5d11f-07b0-407d-b84c-cae01d267ddd", "value": 162600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772602640, "uuid": "036c2aaa-86c5-4c21-ad90-d04058468ef4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "36a7ee6e-178c-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772602640, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772602640, "uuid": "f0a86e60-945e-4aa4-8923-9a8f466c32d8", "comment": "Malware payload (Mirai)", "value": "eec9a5792909b25b9a8335ce64283b2f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772602640, "uuid": "e1a35e0c-2244-4a06-b309-bb80e3f49fb4", "comment": "Malware payload (Mirai)", "value": "1125504e43d71fda2847358618fb2e67c03788a845ad1c973afdba6edf779837", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772602640, "uuid": "890edefa-f607-4aaf-9e07-45d8b8c3f955", "value": "T1D963029E0CA8ECB2D9AE5E7710DD366DF9142185352A5FED55078C80AFBA403F6261", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772602640, "uuid": "3642b599-45e6-415f-ab7f-860e634f7587", "value": "1536:+hkh2Dp/RSm8h+5s0y8Rl2/ffaxBTBGpPvd1hrIljo9q4:/A/Sb+SaxlBMTZUjo44", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772602640, "uuid": "30143e07-f9ca-413c-a577-cb50be1e9ad0", "value": 73228, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772602640, "uuid": "33417afb-423e-43f9-af49-47cbd00930f0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5448c568-178c-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772602690, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772602690, "uuid": "5dde9b67-0338-44cf-9d5b-736c861b7779", "comment": "Malware payload (Mirai)", "value": "cc6702de810fb6a3346ed8f83f4fbf3e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772602690, "uuid": "40f0fb22-03cc-4992-8f63-f188167d11a7", "comment": "Malware payload (Mirai)", "value": "cada3f5cfb9db73b322030c084ef77a79e3ba283f3aacc7f6fe57d8ee3a26550", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772602690, "uuid": "bfdbcbf1-ff78-415a-8808-7484c7bcd1fe", "value": "T16453025094545D76C8B0027839A846C19CE48BFEF1DDB23AF1867009C68346B6AF9F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772602690, "uuid": "72cf80dd-68f7-4411-8578-030cdd247c7d", "value": "1536:RtEq1slHhrJmBFO/5va8TY9TkP9TZ7V80DidqdNrvf+zBX:QlHhUBQva8TY0xyh2Rvf+tX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772602690, "uuid": "0da04773-5309-4487-829d-bdac86137696", "value": 65232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772602690, "uuid": "0433838f-624d-4f36-8d64-609ad9a64313", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "866dbb2f-cefb-11f0-bee4-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772603543, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772603543, "uuid": "4962d4d4-501e-4694-b39f-9cbd4720d6c3", "comment": "Malware payload (Mirai)", "value": "e3ca702505aa8cc3944e0bbfabdceb40", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772603543, "uuid": "d986c1fc-6e0c-4f31-b5c7-97b3d72abb21", "comment": "Malware payload (Mirai)", "value": "c78ca6ee275aec8ce7513d31c5332e1e7ad7742308d0ce3d70393aac4fc4ea26", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772603543, "uuid": "d2220395-3c0d-4862-8670-3019ccedd4ee", "value": "T124D312ABCCBB89CEFE6A8FB52657094F0DF6E1D4E5843D98453B108027F8256A514F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772603543, "uuid": "b3cecc27-2e08-4553-a2c8-88eea67fe5d5", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6con:7O/QJHZweEL/NOjCHm7FZZnca", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772603543, "uuid": "ffbb7496-37f7-4e1a-8741-561f92cc6aac", "value": 135660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772603543, "uuid": "4aa7ba61-3f0c-467b-a359-a5a1cdbd6be8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd9dd62c-1790-11f1-8e4c-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1772604611, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772604611, "uuid": "99b513d5-243f-4400-bc63-f6335d5844ec", "comment": "Malware payload (CoinMiner)", "value": "9077da7cd22576198fabab99f0e572cc", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772604611, "uuid": "f2843d28-496e-4c74-a2b7-1b4bb8c8e70d", "comment": "Malware payload (CoinMiner)", "value": "da2d172c8d2c8e6d53a457e6991aaaf5805e16fa216749a4c87d757050db2903", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772604611, "uuid": "0f17e9eb-c880-4de8-9307-57a723b7b97b", "value": "T1E1363351F3CAD5BDC1A22DB6921847B18EE2FF152B8996D74B1079269D783C02A7C0", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772604611, "uuid": "4591a7a1-e7bd-41bb-82eb-ac67ffc91536", "value": "f6baa5eaa8231d4fe8e922a2e6d240ea", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772604611, "uuid": "2ce75e5a-e2c3-40d2-a7f1-5456ca4fc6c5", "value": "98304:Jo5pB/b8fBiYjuWpQqMvHgWIGMKad3sNp+kcLDoyQ/jkNnz6WxG/:JopQ4YjuI9MvHguMKNp+RLD9796WY/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772604611, "uuid": "d869dee5-b3d4-4492-89b5-1b2b73bb2f46", "value": 4895984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772604611, "uuid": "7f426a5a-98b2-4188-9a18-3d665c0c5451", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce6862df-1790-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772604613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772604613, "uuid": "2b8600d1-5719-4b5d-a1d3-508278fe0841", "comment": "Malware payload", "value": "2f791dd6851d8553229a42c1006ca605", "object_relation": "md5", "Tag": [ { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772604613, "uuid": "5edaf576-d3d4-4db4-8c0a-1bce5e30b53f", "comment": "Malware payload", "value": "fe5976e410f16cede5424e075c5e019d7885cee48178a40457ec7d8be11e66e1", "object_relation": "sha256", "Tag": [ { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772604613, "uuid": "ba4ec530-d8d7-4af4-8ad9-03cba0c7522d", "value": "T179D56BA688B1BF13B7BA8E4873341E5D101426370FCB150AB4BEE7C67683975346F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772604613, "uuid": "d6bc7cf1-fd7e-4320-b462-66c3c5dbfa9b", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFT1aMFRBW84FMots:m0eF4xaDjDONijDG8ZxFTv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772604613, "uuid": "afc097fc-687e-4d63-8fa8-6414cae496f9", "value": 3000816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772604613, "uuid": "8f964638-87bc-4b91-9243-414b6cf7b532", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ceebc39a-1790-11f1-8e4c-82aee05be84a", "comment": "Malware payload (AmateraStealer)", "timestamp": 1772604613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772604613, "uuid": "2102b8b9-8717-4744-b06c-a4b8fc2e1af6", "comment": "Malware payload (AmateraStealer)", "value": "dcc6babb306d65b145c29276cdc03d34", "object_relation": "md5", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772604613, "uuid": "a551a1d2-8c6c-40e7-b0fe-f70315e2cb2c", "comment": "Malware payload (AmateraStealer)", "value": "fc0679e7f8653a35bb725adfd54fa7a58db8b1d10ef0231c65907db622075b58", "object_relation": "sha256", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772604613, "uuid": "930d2f5a-482e-4d21-8508-ab48836f5bf2", "value": "T1C8668D93B6CC6539C06A1A36493BA650993FF7613916CD1B37E40D4CCF35A806A3AF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772604613, "uuid": "daf827d0-3c0f-4c47-8bb2-08f47cb32e4e", "value": "c6731b1fe59584f0330df66b55d0da33", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772604613, "uuid": "095f6581-d225-44cf-8d4d-643ac6345c66", "value": "98304:Vav9kzPyLTpOdv6tLlSIZ0PUXOSkk95GF/:y9kWLSfuo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772604613, "uuid": "9ed560fc-5d1c-49e4-a858-00be3099e8b8", "value": 6498920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772604613, "uuid": "59100dbf-8ef7-4456-a212-d746164f2ece", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "027a0f05-1716-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772604728, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772604728, "uuid": "3aeb6c89-1fab-4fe3-8f15-36e91c43bed5", "comment": "Malware payload", "value": "8237f0a87877db69379ebb90f652afee", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772604728, "uuid": "9e8b05aa-09c2-4ece-bfc1-d3696edb3f15", "comment": "Malware payload", "value": "7571c0a8568b366fa27987702bd54c1a408d5177af9c83aec9a4ba69aa9f181c", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772604728, "uuid": "4b1ef6e8-8149-41cb-ad3c-5a3bd36ab9b9", "value": "T150B306731263FEDB4B771E40C0483541ECA9687FFA6092ACBF8205D685E5958CEA9D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772604728, "uuid": "e19361b2-ebad-4a9b-863b-3f42e19ea5c4", "value": "1536:YRa5tw7q89HbTZh6Un+7ZzMV8Gc2qLqjFbVb3AeE8mrcNE23lsOV1tyKiTpJzwGu:Yw5yqKf+d2qOfEkBf3iUM63", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772604728, "uuid": "ad8ad302-3591-47db-baf3-f7b0353de1d8", "value": 114696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772604728, "uuid": "fa9a35a3-c934-4f5f-9403-bb555ecbd3d7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "387f7c11-179d-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772609945, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772609945, "uuid": "caabb650-414a-49ea-b9f4-9603eaf85548", "comment": "Malware payload", "value": "6db8c5aa5b763ae196b262445e0dc26b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772609945, "uuid": "843669fa-9915-4206-b577-42e18d2af7a3", "comment": "Malware payload", "value": "a4edd89543b784fd0c7823cc1519580fc6e66610aac1439f14b849dd1e5feab0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772609945, "uuid": "2447a685-8549-4155-b8cf-5b6661f31ec7", "value": "T16234F0599846CA60B0F667806F11894F9B0559C862153CEF8668317FCC4B73FADB0E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772609945, "uuid": "43628f1f-6239-4088-ba85-b1c3720f5d9d", "value": "6144:t8E263Mhpp5Ek0YBUj9Sv0B++JBZCRhfJXZ5a:tbeppu1bjkcMjd6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772609945, "uuid": "572c4943-0480-454e-9315-c87a1306913a", "value": 247900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772609945, "uuid": "82ace781-c622-4926-9ce4-812e19ebd0f8", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b57cf9cc-179d-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772610154, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772610154, "uuid": "82bd7413-03f0-4327-991a-95032ab40c7f", "comment": "Malware payload", "value": "36f94ec5083774e29b165bfc1c415c3d", "object_relation": "md5", "Tag": [ { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772610154, "uuid": "f3f1675e-2f97-4df6-934f-0ee6750c70f1", "comment": "Malware payload", "value": "f27704629a4b9f59c0c17c892c783b874e750c3de4fbfb306e1712bceafcce7f", "object_relation": "sha256", "Tag": [ { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772610154, "uuid": "53e76786-4ad3-4650-9f87-92c6b9637c54", "value": "T156118011DC0278E75F57B2F4CA131A18DCB9F93B4065A84DB714CD491E359F8B1607", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772610154, "uuid": "c3bbdaa5-0509-4998-a274-8b98c23181eb", "value": "24:KXnAKqahwAW2wc0K5NU9RGUimUwn/zii9nJswC9KVk6Uwn/zii9nJ7wC9vZ44:NBW50YNIGfmdJJC9KVk6dJkC9hT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772610154, "uuid": "dfc756ca-e818-4ea7-9c14-8aa0df5eab61", "value": 1102, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772610154, "uuid": "03a65f00-4848-4453-92d8-831e09e1a314", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b94c21bf-179d-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772610161, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772610161, "uuid": "6c6c7d9d-39fd-4c7d-98f9-d39b4f3ba68c", "comment": "Malware payload (Mirai)", "value": "52805c0ef68ffc27f114963a8b28e295", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772610161, "uuid": "2c381139-32e4-4b14-b9e3-1a0ea9ca4857", "comment": "Malware payload (Mirai)", "value": "6b727573a20e52183dd2921068626f205bf9abef811aa17f1493ef0634a6ac97", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772610161, "uuid": "e18039b5-cf09-4a91-bfd5-36fb3eb63881", "value": "T126735D99B4019F7CF95BC9FA41260D0EF82163065A830F27B767FE936CB20959E07D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772610161, "uuid": "3ef46c2f-7fd2-45ae-b4a0-926a185f4216", "value": "1536:JlzxW7ZB12jUPl6TwVmjA+mzNZlBTrx8SrEQfj:ANB12YPUT0XPlB/N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772610161, "uuid": "b2ca7dfe-1bb6-4778-947a-aec994169733", "value": 74592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772610161, "uuid": "3dff4df1-1a42-45c5-915b-e2e28605c648", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef4c53de-179e-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772610681, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772610681, "uuid": "1df4beab-b07f-4920-ae0e-eb54f714f310", "comment": "Malware payload (Mirai)", "value": "acfda8b7b77f47892f8750f76d4ea79f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772610681, "uuid": "c22b667d-46d7-4ad7-8518-08e87f570576", "comment": "Malware payload (Mirai)", "value": "a9df931f5322690419c8a1e01007f64b42258283a64757fb2023590ee517c27b", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772610681, "uuid": "faf18dfa-f1bd-449a-9776-b78e9819d56e", "value": "T139539F73D0A9ACA0C04445B56568CDB00BA39804B6A77EB65982CE358007FFCF61A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772610681, "uuid": "742c20b3-bfd3-430f-906c-9bcb4f8507c3", "value": "768:V/+eIMbW9aClgb9WleEPn2uKg16N2DzKWQpxHBFqM8eEfzRfloViu2DCi0DF:V/H5C9aC70MKWQriRqVKDCi0DF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772610681, "uuid": "0f555e0a-7cb5-4582-9fa5-394f03f13d26", "value": 66552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772610681, "uuid": "7bb5fdec-7309-4559-a09c-ade38db55fcf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "22c89258-179f-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772610767, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772610767, "uuid": "8e34ebdd-e03a-4384-bbe2-6c1baab68c46", "comment": "Malware payload (Mirai)", "value": "01a07201f7c203bfb6bb78724a18c065", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772610767, "uuid": "e7d6eba8-5ec1-42e3-9655-f7e5cc01f5e9", "comment": "Malware payload (Mirai)", "value": "5eba349021e95339d69fc905707f5be3b7876fb5f74bec0a65bb520f52ebf0f6", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772610767, "uuid": "30eb78ba-7dfa-45d2-a09e-ae07e0406f89", "value": "T162736C86E757D9F0DD060AF0217FFB36D93698363224DEA7E7C4F857ACA254290122", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772610767, "uuid": "94837ad0-0cc9-4382-a9d0-4ed22de83433", "value": "1536:x3eUfjQijuY1feW/yE8DidLHSKKfnaQ8D2gt7:x3xj9TeBuLytfB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772610767, "uuid": "1deb608f-e45e-48d7-a8f0-1f623346dbd4", "value": 74716, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772610767, "uuid": "dba4baca-6f10-434d-82c5-824f7f38dca3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65fe4dc5-17a1-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772611739, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772611739, "uuid": "0149945d-675e-449e-8e70-fab244c842b7", "comment": "Malware payload (Mirai)", "value": "6641328edccdf15f1ca03d3d291571a4", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772611739, "uuid": "46218f8b-65df-4b18-96fb-ab77001d19f2", "comment": "Malware payload (Mirai)", "value": "3669ac19d7ca04e7de7fee18b07ae0ff08ba9c9f1f1ee4b44ba85c79769eaa92", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772611739, "uuid": "28248cc8-14fb-41d0-a3fd-a80010b3cb27", "value": "T182E36B42EE418E03C4C51775BAAF414E3322A755E3EB73068D18AFB43FC6A6E4E671", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772611739, "uuid": "9f28b2a5-1bab-46d7-a7d1-8a947934d6db", "value": "3072:vv/qPbgZkQxQzevcluDFNbtpy/r7MNuw7ir+BKM/98rh:n+bgxxQzevclupNtpy/r74uDr+oM/981", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772611739, "uuid": "0b406693-301f-4fde-8abb-4bfa7881d13c", "value": 148990, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772611739, "uuid": "d18b048f-8a61-47f4-9461-47f0cb372356", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc809467-17a1-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772611911, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772611911, "uuid": "32d3e104-5400-4f0c-9049-3a792e8d5308", "comment": "Malware payload (Mirai)", "value": "73fc43312ab6efde728198d1d4b4d749", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772611911, "uuid": "8a7738b5-49ef-4c23-99c6-aa08cab14592", "comment": "Malware payload (Mirai)", "value": "c726e56fcb2693456279ba27fe9267832d65d39e656e681190833f01e7dca83c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772611911, "uuid": "0d7e3181-8856-49e1-905d-1536da93a2ba", "value": "T1DD831A82BC818D11C5C813B5BA2E118E331623A9F2DFB257DE115F2477CA92F0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772611911, "uuid": "22053b4c-a9f2-441c-b325-fe0d102397c3", "value": "1536:vinJr73EnAYAnM09ltVTnjSUh9odbviFts3XRazJI2i6tBsT0NseFDF:0rYZAnNv/TnjDh6NKLPtBsT02e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772611911, "uuid": "63a0206d-95d5-4888-9d35-d5f075962e3c", "value": 84232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772611911, "uuid": "d74ee6eb-458f-46e5-b596-3a38573c2d65", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4c17231-17a2-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772612300, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772612300, "uuid": "16fb5072-44c1-441b-87d7-0b726186b47b", "comment": "Malware payload (Mirai)", "value": "af267033c0414eecc7b8d63a5fad1e9e", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772612300, "uuid": "b36858da-9852-46f6-a417-053f15dac8b5", "comment": "Malware payload (Mirai)", "value": "755d0635bb1effdf27f5f828ccdae96ffbe1bef6839f445168ec3611e65c77b9", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772612300, "uuid": "856b9287-323f-4a90-8f0b-e63264e7b9f5", "value": "T176631843BD4184EDC149D138537F763AC56635BE1239B1EB37E4FE2B6C06E600A2D8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772612300, "uuid": "a7384be5-cba1-46df-9233-25e352b7938a", "value": "1536:RyS8pYi9mY72mIoLYKblpico7/qdnLDdd75DGA9:0WAmYamIoLYKehqdvdd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772612300, "uuid": "57fae295-f5b7-428a-8dfa-20d426e53cb6", "value": 72576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772612300, "uuid": "00e6b0c4-2d26-474d-82b8-1fd18e8b2650", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00f07073-17a3-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772612428, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772612428, "uuid": "cc75fa51-eb55-487b-851c-9a876f5b65a1", "comment": "Malware payload (Mirai)", "value": "5fca2ee0e1210dc42996b2826e94dc1f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772612428, "uuid": "3b97aff7-6fcf-482f-a256-6e2d976de630", "comment": "Malware payload (Mirai)", "value": "f89d25a12a3642fc6493fdb10967afb4d7ff12dcec9ddd4b5c4343e03aed97c1", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772612428, "uuid": "e739cf50-5d4e-4f10-97e7-8cbff2285b5c", "value": "T1A2534BC9A593E8F5EC090A712173FF758576F23F216DEC87E3A499A2AC42103D1162", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772612428, "uuid": "5bb01106-b305-4431-9e6f-b610f779fbf8", "value": "1536:dnA1GL2BeQAvXLfmYM0GTm4JnSzKY/0HckpTiCicD2gt:y1GKBefz+70G64J4KY/JSN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772612428, "uuid": "78a6b5f0-24aa-4ff3-8c37-f0617f8997f4", "value": 66608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772612428, "uuid": "2419b401-fdba-4ae5-be48-477c0d9616f1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25aeeabc-17a3-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772612490, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772612490, "uuid": "ddf02c68-9b62-479f-85ea-b80c2055a6bf", "comment": "Malware payload", "value": "213a8ccce481397c62d08452558b3b9f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772612490, "uuid": "d33b5f5e-ee7e-4a18-9c5c-34e008a76dbb", "comment": "Malware payload", "value": "a2a748869f3577e52bbb2fbd3492b0123ae89bbb62193447b17843922a8f978a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772612490, "uuid": "b74687e4-6c19-4608-9b6a-a93874187d29", "value": "T1A05423EC8974D8C3890DBC8D35F0D9CCA106A25EA9E73EA602F4CBD9674D9C357510", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772612490, "uuid": "e06325a7-dffe-47ad-a185-b22930d37817", "value": "6144:oq+QyowuKenuYcVWEQk7IU32fgUE0EIKUdai3iH0pJNUiT+agCo6:oq+QyozKJWEQk7l32fgU5b/UHagCo6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772612490, "uuid": "32cf7edc-7395-43f9-9f9d-28d30e37b534", "value": 283732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772612490, "uuid": "8e6ba860-402d-497d-856b-a28b4c0bdb24", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "749e75de-17a4-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772613052, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772613052, "uuid": "d6860674-998a-4354-a370-8b1359b3d4e1", "comment": "Malware payload (Mirai)", "value": "190ffb5a95426e41406cf7408012ba3a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772613052, "uuid": "faf1f303-f2e7-4de1-94f0-8374a7e6e7d2", "comment": "Malware payload (Mirai)", "value": "f8eea1f5af1af4eb4f5c9ce1f38d65a99ecb1ab5915b7f9cc1c53f290d4b3e79", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772613052, "uuid": "63b5577d-24ac-4b8e-b7ee-1cdf84098110", "value": "T1D2734B86F98B84FAC51B8C3051B7F13FCA30D87E417196AEEF596E35CB3790292161", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772613052, "uuid": "97c8c3f7-f48d-4bbb-a652-88db4ffc3102", "value": "1536:WNQh18AdIiZk/eLy2lHQjb4cM/NxLcs8lGJhD2gtk:WNJACiZk2LBl3cMlxAs8o8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772613052, "uuid": "552e75b4-dd41-4e1c-b494-b9b735dcf0cd", "value": 74672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772613052, "uuid": "b32f61c1-53b8-4307-95b8-dca6d7092272", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88ebec33-17a4-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772613086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772613086, "uuid": "ed7d1acd-efcc-461f-85c0-d6ad59229d68", "comment": "Malware payload (Mirai)", "value": "c1f915184f38ad7f5a67a4be1fea85fb", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772613086, "uuid": "b54c8b46-1486-400f-a166-544ec45761ed", "comment": "Malware payload (Mirai)", "value": "d07b76ec268a4cebf4718c40037a6a855dd75385e6841e5788f899cedcb1d4d1", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772613086, "uuid": "06718faa-1110-461b-ab00-bcebeae863e4", "value": "T140633B0237684E03C1A659F9292F23D083FFEE9121F4F5842A0FDA5A8275E37555AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772613086, "uuid": "fc56cb0a-7aae-4c85-a55a-0fef9f88d6c0", "value": "768:kOwkQx3TMR28v4Ru+RqD6wTRAbaAdQAiYfu9B+9jXRMxeB2TK/4fo2ql+Y2AH5Yw:GZM4NJKLBAixOKiUKQfj+H5YLd6DFX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772613086, "uuid": "179fa64f-a19e-4c97-bde9-b50b4b35fc39", "value": 70752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772613086, "uuid": "9f549362-24d0-422f-87e9-5b77f7cd2e7f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e04adf12-17a4-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772613233, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772613233, "uuid": "3cab29a8-423a-43fc-a686-af7914d7b88b", "comment": "Malware payload (Mirai)", "value": "b57e5b5c595042376546dbe46b18aee5", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772613233, "uuid": "2e3eb062-d814-4a58-895e-d2c53a7a7529", "comment": "Malware payload (Mirai)", "value": "952d50fbeba80966a785dc0a427b7514b7d4f0f8b13c072095bdef8dc757f66b", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772613233, "uuid": "6fb0d580-ad6c-4f16-9661-8e3955eb0615", "value": "T16E7329792581F6BCEEE090B8F45320D518A20A1C37DCE1E37493947AEF74B49722DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772613233, "uuid": "c47c0f6b-819d-4e86-b5be-6008ba1780e9", "value": "768:iQEMqpCawCB0yOOe11If9TUpO7ANZFYJgD4b8YE/6AYr4BFOWKciijD3:iVMqgawCCyOxi1goURQg0b8HJbdjD3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772613233, "uuid": "813cb8ba-3d2c-4887-b406-966289a89917", "value": 75152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772613233, "uuid": "ad7aca6a-841b-4832-a844-75d7f6fae26f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3b650f7-17a6-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772614017, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772614017, "uuid": "7b9c6a0f-94f2-4c4f-8e0d-b2fd678d9b35", "comment": "Malware payload (Mirai)", "value": "d9e5f4f4de71e3ef5a0dd3ffae020a0f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772614017, "uuid": "2c0fdb52-3503-4b7c-b53a-0fb5b6b91efd", "comment": "Malware payload (Mirai)", "value": "2581dc4fa78b2561596d4cbe7e62c0fa3f8881c2af5b5ff14a77f80334b69173", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772614017, "uuid": "2f478fc7-8587-44e4-8461-313c6c1286c8", "value": "T17A532943BC91991AD6C013B9BAAE60DE332173DDE1DE720BDC109B543ACA91F0D7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772614017, "uuid": "42ddaa8f-a77f-48d8-98c2-472b332585e4", "value": "1536:ortMf0p751vcX5R+pdrT5MqR69HFYyeX+yg4TFtmBDF:or80p74aG79HFXeXMqX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772614017, "uuid": "81795f1f-64fc-4e25-94f0-172929fb7461", "value": 65316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772614017, "uuid": "8f1bf941-57bc-4087-9246-e7a96e8c9ff0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00a4e467-17a7-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772614146, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772614146, "uuid": "926c4452-b874-4bf1-a59d-0b827daacec3", "comment": "Malware payload", "value": "9c6147e7ea6d6fe9afc1ec776a329d08", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772614146, "uuid": "fbfc4ec3-8d90-40a5-a4f2-c9e727c6d27e", "comment": "Malware payload", "value": "b1513a9f9b47642324f3e804bfb0d22585b287977781a5aeb068901ded8183c7", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772614146, "uuid": "8356d932-3237-47ab-9da0-490e3b62865c", "value": "T124210605A9E153B729812567C2007CD9CBE78AB8C3B149647C4FA88BEB989BCD5075", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772614146, "uuid": "5f8fa47e-194b-4cc4-a80a-dbe8608c57a6", "value": "24:Wlux+49snxXGMWZyoft9el9xXGEzmhFwLohEJ9xXGEzuTFeeEJ9xXGU+A8FGeEJ2:qS+gmXGMWQolGXG4mTwEhEBXG48eeEBC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772614146, "uuid": "bc9821ad-95c9-452a-8a10-42bd8d97cad3", "value": 1418, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772614146, "uuid": "a8798b21-641a-4ed1-9d1b-4d4f122c4518", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c5f7a91-17a7-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772614407, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772614407, "uuid": "2cda1ac5-6f77-4c5a-8629-91e4f002b086", "comment": "Malware payload (Mirai)", "value": "7a42f06baa8fda7f26e91b2240183484", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772614407, "uuid": "c562231c-68a2-4250-8eb5-471bfd158ba4", "comment": "Malware payload (Mirai)", "value": "9c42c8d446d50efbf0c526a56ee5c55cccac24885c030bf5c1110fada30cd7fe", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772614407, "uuid": "401a53e7-fa9a-441c-8f5d-3b1676ced6ed", "value": "T145737C21AC792E12C0D4D6BE12B78765B1F6234F24A4CA6D7E310F8EFF505E4A6172", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772614407, "uuid": "eaa359aa-6947-4ca6-8138-c0f6a2a20fb9", "value": "1536:6f4Vjq873S3JiIzF6K5rRGgWu4naLZAiDHg:MIWshMGVyZQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772614407, "uuid": "c554ff5e-f737-461c-ac6e-39b371a42a4a", "value": 76960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772614407, "uuid": "f3b793ea-72dd-4cde-942f-00c3f7790d4e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1d41cbf-17a7-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772614416, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772614416, "uuid": "a8478c51-9a1a-4c34-954b-6581ac0f2f84", "comment": "Malware payload (Mirai)", "value": "3d5e93b7bb0e406db6d026713d96056c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772614416, "uuid": "7551e7c4-e081-45bf-9e76-5f2085c917b1", "comment": "Malware payload (Mirai)", "value": "cc82b3051e31143956d3e04c3de9bd03f5a9c3f452fa7e6596ae5741a9e3bec7", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772614416, "uuid": "339cd80e-32c3-4095-bfba-d5f700bf0830", "value": "T167A3620A7F610EF3ECAFCC374A992B85148E651621997F75BD70D818B60B24F19E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772614416, "uuid": "8c8012d3-370f-433a-b542-85691b6f71c9", "value": "1536:noXVScL2f/0poEgA1ArLeibeUoo1/ON9MZBdifvDr:oXVScL2f/0poEBArLQfM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772614416, "uuid": "b7bdd9cd-b1df-40b3-8903-6b8f4f9a7a0e", "value": 100552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772614416, "uuid": "c8e3b2ae-2b72-4c28-a31d-3c26ba681033", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4719793a-17a8-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772614693, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772614693, "uuid": "a40242e5-e297-4a24-a25a-745119632ee0", "comment": "Malware payload", "value": "5c8b6a7f1081b17d72fa645fc15dafee", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772614693, "uuid": "028ecb4c-c2b2-4060-bec5-a465cdb401f7", "comment": "Malware payload", "value": "a4f0fab7694887ac499c128a7b98f532fa3bde69504297f6fe42c6791da563c3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772614693, "uuid": "6ca55433-dce0-4c04-8cfb-84465ac19920", "value": "T12124CFE0C5D7191C0E2051B6037D484FAB999D2ABCECEAA04BD30D60AF66CEEDDD97", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772614693, "uuid": "f24029c0-dc7c-4131-9c49-a3d66b09a947", "value": "6144:6JiTuKXFvDMmVn+zKoielxGynOrfErxdqfbVixVE:6cCyFvDMGno57rgv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772614693, "uuid": "e645d3bb-c6ff-468d-9c76-a655fd45ce3c", "value": 223306, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772614693, "uuid": "865f7b81-2c8a-4967-a275-a95548363bbe", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c5a1231-17a9-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772615051, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772615051, "uuid": "272ede72-34b5-4d51-b970-0d0d45a486eb", "comment": "Malware payload (Mirai)", "value": "07e8d3939a17e1a85b43304ce58612bb", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772615051, "uuid": "1a0cac48-f845-4adb-ae2f-6a3e6f1193ff", "comment": "Malware payload (Mirai)", "value": "92a65e4fa18cd21fac7a1b63d19793de325807f2b75781ac56feda3b90d2b54d", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772615051, "uuid": "ff729f9e-e19f-4823-8e44-544d94c07c09", "value": "T17393834D2E219F7CFFAC823547B74F259248339A36E1D584D1ACEA021D7434A742FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772615051, "uuid": "516e2b48-1ab9-4d23-9d6f-71970afbcc71", "value": "1536:hJJIw59EG23bgd9HkAcH1gOx+MiCpulQ2TIQ0IV20EWibv/HnUhxbfbCDbDbPS:vuw59EG23bgd9HkAcHjx+MiCd2TIQ0Ib", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772615051, "uuid": "c6247504-36ed-45ae-8cd7-0c0fd72741dc", "value": 97368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772615051, "uuid": "651c531f-4f20-4139-b819-92a4839a2652", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d76130d3-17a9-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772615365, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772615365, "uuid": "751d6e43-1a2d-451a-9bb9-6ede1eb4e927", "comment": "Malware payload (Mirai)", "value": "6ad01fadf2a50f5a78b1c0964e4bccc5", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772615365, "uuid": "3675eae8-6f10-4c1f-b041-afbe9f557d8d", "comment": "Malware payload (Mirai)", "value": "5a883f181447faaf82ebfcbfd91e49a979e3e6db9c41e954f9af79f5a1b691f5", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772615365, "uuid": "269fdf8e-2047-4fac-9317-8c61a9339393", "value": "T104731843FC81D906C7D013B6BA6E61CE33116399E2DE7207AD216F6436CA91F0E7B2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772615365, "uuid": "ceb69b2a-aced-4c36-854c-c9313a6a5ac6", "value": "1536:n2j/RjASjzCTuaIGZ9FTU5yjL+5DmFBM2Irzy2+469b4MjWDF:n2tFjvM9tUSymFm2IL+zZZj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772615365, "uuid": "6a208232-9f56-4345-935c-528b3dcea8ba", "value": 74752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772615365, "uuid": "b4678f23-7767-4087-829f-e311f245296e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea653015-17aa-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772615826, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772615826, "uuid": "d3a543ab-c400-4494-b219-dc0a66db1be8", "comment": "Malware payload", "value": "25eda7b903e41566efc8ee0e74f58315", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772615826, "uuid": "92de80a0-6f17-4fc2-8b6b-3285d8b8da0e", "comment": "Malware payload", "value": "ba767a88807a0660c9f5430af9ef3638396d10755e44cffdeda83e902e9767e5", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772615826, "uuid": "fe03cbb2-1d46-4de3-8f01-8b14bd6a1033", "value": "T15CE42386FBB8C2EDC61B505C7D28176BF932F49BCA14672B221858E95E17374EE043", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772615826, "uuid": "57eb80c8-594c-4d19-8e3c-a5b56b2216d4", "value": "12288:wNXFxA8Rhja40xDYdQsrrgISZVap+d0RiYRBPF4iEni/ZYGcZl/i8UnSZzh67WmS:wNXFxA8Rgrnap++RbRwjQUZJiPnBWZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772615826, "uuid": "b8410a61-787a-4c79-b011-8f8bc63ddcad", "value": 661067, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772615826, "uuid": "aca922dd-98f9-45e4-8369-37b7bbfff381", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5582cde-17ab-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772616194, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772616194, "uuid": "1cd4ff9b-4e34-4319-8f21-111c9e6148c1", "comment": "Malware payload", "value": "ce11fe3bd4315246a6245ad326d7f816", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772616194, "uuid": "17402ce5-3dbe-4129-b2e7-f6be56c56c52", "comment": "Malware payload", "value": "a945e648556cb1ef96710cd1682c9bb989dcfa4809dd7f84f31413aeb87f144a", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772616194, "uuid": "b12b4e56-f750-4b37-94da-33e30ea67982", "value": "T19807E66B24DF59AAC3EF564149B22F1871B47712AC170A3BA1BE75C79B713B80803F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772616194, "uuid": "0a2c9d6c-2f4a-4f04-958e-43fc9cbce4b5", "value": "49152:8UixbItdTrJoFVPMvXGw9Z4YrArVd1fCo1beULmi+VrKct/7PSBPy25NR6M0/fcg:7iBI/JoFdMPGY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772616194, "uuid": "b2e6913a-45d1-471a-b82c-4ae7ec509af6", "value": 16837457, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772616194, "uuid": "51395877-cd12-4f43-9168-3ef26260cf5f", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7dbbadc1-17b7-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772621228, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772621228, "uuid": "ada7999e-0fe8-48fd-a466-d2d726e6ccda", "comment": "Malware payload", "value": "ac927d4f8e3732a3f67cbfdeb09e095f", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772621228, "uuid": "f0881c7c-1c69-48d0-8763-89593db458d7", "comment": "Malware payload", "value": "c416031db58c58ee2812d8994312fc442ef1653174bd6d6bc6e1a19508c6b2e8", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772621228, "uuid": "5dafb81b-eeae-4177-bb81-a6db97546516", "value": "T15D941374CDF45182606A8A04D76BBDD66E15C8678B8B409283FB7B02AC533B1C7E17", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772621228, "uuid": "d21a4c9e-d52d-4e60-b96e-e19c95fa9304", "value": "6144:GUmVKtHh422NtCrofE7fDxGsuRX5T+os1MiCxwDQ9Efiro:baKtHJ2Orom1fuRgZ1Mpx/9Eh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772621228, "uuid": "5820b2bc-1589-40fb-9a43-8e320969be16", "value": 415540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772621228, "uuid": "818a6ccf-c831-455a-90df-0ba318f02379", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7dcd93a8-17b7-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772621228, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772621228, "uuid": "2f3304ea-5ec7-4049-9af3-038c98cd53b8", "comment": "Malware payload", "value": "ac4d4bb9c4c6dddc9268dc5bb5bccdf5", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772621228, "uuid": "c918ffae-3d83-4071-a7ec-9333ca2b2008", "comment": "Malware payload", "value": "49b6586bdda9a4d334598ce5e9b0891c62ee516fa194885e963cd81f364b040d", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772621228, "uuid": "ffc43901-f745-49cf-b18d-05a3b91b2a5b", "value": "T13B341227F5CD907EDB8DB94EA99C86E060F9D91C500480E4E7BCAF836234EE813E49", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772621228, "uuid": "cd78a9dd-f608-4c3e-bcdb-78efddbde09a", "value": "6144:zFyAh/Ko19OYI8WMTREzJpJZRYH5BqsD+nVDnuQWTy:hD6JvkRwpJsKtnVDnfuy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772621228, "uuid": "5b7d0b8d-0a04-4b02-aa71-984698d0164c", "value": 252992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772621228, "uuid": "c6d53aeb-97b2-4beb-960e-53db48da9d26", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7dd083ca-17b7-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772621228, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772621228, "uuid": "7c969b3c-7f25-44de-a372-59fa39200d1a", "comment": "Malware payload", "value": "18fe06f3736168b536ba2b2b547d8a0b", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772621228, "uuid": "fecaad83-303c-4868-85f0-24f8d64e5a59", "comment": "Malware payload", "value": "8159a87d1118ca0dc30735ea4ad214ee70d684e2410420856966557b2a117a54", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772621228, "uuid": "89715beb-2aa0-4cac-a042-b458e23bfbb2", "value": "T1A934125807B56142D96C61DE1A62F07C7BF774D4DFB1AB4E1E9CA000EE81F69387E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772621228, "uuid": "6fd78d18-c24f-4b75-b7ca-b8304231022c", "value": "6144:pp2gkyAAhjdWiDDE9nwc8UXDPrdj+7Xlj69bq+6/vU0ET:FHAA5VM/L5j+7Xlj692vs0O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772621228, "uuid": "af2f723f-7472-4aca-a393-6cf4835473bb", "value": 252992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772621228, "uuid": "f475d66c-b1ed-4e0a-a24c-2fb0a1aa362a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7def1b99-17b7-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772621228, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772621228, "uuid": "ae9d4b34-5027-46e7-aec4-0e31c801512d", "comment": "Malware payload", "value": "58eab890e82d82c32dd5410c757c8f37", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772621228, "uuid": "873262e2-0ccb-427c-b822-97c34c7c4c3e", "comment": "Malware payload", "value": "a6dc7a4ce9aabd1ddf501adae985423dd3a90315294c4ad3f5b61aa5c7984b2b", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772621228, "uuid": "d13f8488-2c73-4097-ae72-50caadc257ab", "value": "T188948A78AA53D726438E86E1374F0932EF20758FFD8514E5E333872A12537B64B96B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772621228, "uuid": "963c0ad7-e6d0-4a00-885e-1dc1d93afe54", "value": "12288:RMINSqE8TtMN9BChR91x6TYbrCx07dBDw:FVTtMzBCL91sYSxN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772621228, "uuid": "0718a2e7-e1de-4919-ae39-063c1d9498e4", "value": 441732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772621228, "uuid": "c729ccdf-7eef-4db1-a435-a99221707d84", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e03df1c-17b7-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772621228, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772621228, "uuid": "598b29df-6e53-48cc-aa5a-56ba69f67423", "comment": "Malware payload", "value": "7e26d07048f80273b8ae3d5720f840c1", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772621228, "uuid": "fd6e6bd4-adb0-481e-9f08-9a6ba5995340", "comment": "Malware payload", "value": "28cb29accd009bbe16add2dd09acd945a902c10129783baba7a70365f79b121e", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772621228, "uuid": "5e8db717-51e7-4920-bc3c-0e3ea0a7079d", "value": "T1C89413753DECCD20F7B8BF0F185B7FDADD6A691BA0239A322578D9E0100469E1B391", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772621228, "uuid": "8b800773-92fe-4ef2-a16a-a8d4adb21a0d", "value": "6144:y3iPUS0U+Aky+NsuCgU+Mg2EKracuCrGtD8Ge:TMjBy+WRgvMuO8IGtD8Ge", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772621228, "uuid": "2fdd2ae3-3395-48d1-b86d-f180b6285454", "value": 418584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772621228, "uuid": "6cdeeb2a-41a3-4d81-a4eb-32650498dd29", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "629a6334-17bc-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772623330, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772623330, "uuid": "883c3ba7-ca88-46d9-9faa-d7d31a7a955a", "comment": "Malware payload", "value": "d097c1f489a9062cdd1d61100c6e6ae8", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772623330, "uuid": "589a98f7-9ec9-478c-88c0-e2637b47ab4f", "comment": "Malware payload", "value": "6f5f2fe579dfeee04901aea62e1a167b3399877b74cbee1d291dc94eea696ce9", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772623330, "uuid": "49234648-a841-4a38-813c-1c80335a6897", "value": "T1F7E62341FB59EA1ACD77C433CAA5023792954C0C9263E31B14A9F26C8EB7AD05FC5B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772623330, "uuid": "be182f90-52b7-4b53-9c4e-d53e4cb12c98", "value": "393216:ja09593oHlGqyjFjg0y6tXMaCpEz/Nvb2BHBBoJjZI:jl3oHghM0y6eJ+lv6Bvo3I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772623330, "uuid": "a7efad21-cc7e-45c8-968a-e3109ad9a6b8", "value": 14676628, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772623330, "uuid": "99a51bd8-7f1a-4e43-bded-028cf13f5e59", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64be478d-17bc-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772623333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772623333, "uuid": "6124642c-bfb0-4136-ac22-c614d4c0ec2e", "comment": "Malware payload", "value": "be33f7802c6472ae56f142495aa19c5e", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772623333, "uuid": "5f38f509-6561-4f5c-b192-bdee9b015345", "comment": "Malware payload", "value": "422586d9bf14a270bc9a0e397ed5effe7bb88f0a1955cf98aecd435f68f42788", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772623333, "uuid": "5b90d4c2-50b5-461d-a489-54f00d5587c0", "value": "T1EFF423A8EDB061A8E595FC27BF2BC1D792681CF2C0141C6F92BFC66D076530B9122D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772623333, "uuid": "2ab22d44-e706-4363-a198-95f01d51da27", "value": "12288:87C/fpL28VP/e0bK9ar+o/vMMTBYy8WCq0RcpzFlk2bdM3tWrQWjRYn+36cqTMeO:gC/fpL28VzrSuBYy8WHBNb2ojmmNMZO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772623333, "uuid": "6c76ca68-67df-4a52-b22b-e9ed0de18ad9", "value": 734291, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772623333, "uuid": "86ee34b6-f60e-413d-b856-f682314dc7ac", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84e52aaa-17bc-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772623387, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772623387, "uuid": "6689e904-0b79-42dc-996b-055ee9e2e94c", "comment": "Malware payload", "value": "4d69a9e3052167a639cddd15cb2ea6c3", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772623387, "uuid": "a2c3c3e6-7f73-4c3e-9bee-9b32fa36ec13", "comment": "Malware payload", "value": "d3be25a24c99610e44eb9167c6592583ceca6e238709122f42c99c99415debe2", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772623387, "uuid": "50b1008f-3750-4d89-aaf9-105d71222fbf", "value": "T121D5AD8AFB0C992FDCB6103A1DAA077126575C9A8D82D7433404732CB9B76C84F5AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772623387, "uuid": "e2acc85a-4078-44de-af3c-655a68e8fed8", "value": "49152:V6pgAYsXw3u6l4N6T4qq8F2NVa7talgaSic3Q2E8cNT:VU7tXwE6TzqTXaJ7ic3Q21cNT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772623387, "uuid": "0c75df19-cb22-4c9d-b484-98ee0e24aaae", "value": 2780780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772623387, "uuid": "5a3b75a5-73f6-4432-9ee6-464ce793d84a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "877c7e2e-17bc-11f1-8e4c-82aee05be84a", "comment": "Malware payload (RustyStealer)", "timestamp": 1772623391, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772623391, "uuid": "a4762101-4c50-4c7d-91fb-e3b8ad2ade53", "comment": "Malware payload (RustyStealer)", "value": "bdba20a426886066fbac157cb730e45c", "object_relation": "md5", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772623391, "uuid": "7aa5c745-8253-4dfe-9e6a-39819c2c675d", "comment": "Malware payload (RustyStealer)", "value": "46cca8b88edb47de897bb0d1dff84691ff65bd55610f91f6f6b3f77739c423c4", "object_relation": "sha256", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772623391, "uuid": "8c5f3977-2fe1-4ca0-b007-fcbe80670ce0", "value": "T152858D03E69585EAD49EC07CC3579632BA32B88E0731B2EB27D58A253E27F805F1D7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772623391, "uuid": "27631c59-d1e7-4b43-8187-72c3e96744f1", "value": "4ae12844478ab6eaa6579760187df247", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772623391, "uuid": "f49ac235-a59a-4c7e-bde1-2b0d9a3b9ced", "value": "24576:NgHQ357d0pLkp2+HXgV57W0RFDH2wM5IeQbrNwRYOFM3VIH06iyD:NgHQ357d0u3gV57WSD9eQIYYYIU6i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772623391, "uuid": "c0fd5122-224c-463b-8b11-a453435a7df2", "value": 1847808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772623391, "uuid": "427f2145-3f61-4fa4-9bb2-55c150ce1d37", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ba70f2d-b732-11f0-8aaf-82aee05be84a", "comment": "Malware payload", "timestamp": 1772623445, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772623445, "uuid": "cfd4a8ba-6735-4e79-9146-17e77dac99bc", "comment": "Malware payload", "value": "4d0459307e2fa560e12d76270dd561bb", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772623445, "uuid": "0b60d1eb-7c94-4ea1-bd09-e12f74f3947c", "comment": "Malware payload", "value": "d8e50b489b345f7b96e50e157411407f5e3d414203524f1064db38b27ee747ba", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772623445, "uuid": "8d6f1ba4-6d81-4678-b6a3-30f714ed0a39", "value": "T19356F1C6F7D8A92FC8775072C9BE52B141874C028A839F836D18760C69BB5D46F5AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772623445, "uuid": "c454bbf9-8ea9-4b89-8d80-ef94e669f5d6", "value": "98304:XWPhUoTwrYBKOfsros5OrsbxYfc0D1BWoz5qPvrEZC0vPqmYZnXrfLR/mpCltb:mdKOfyaIbaciAFvrEZpXqmY9XrF/mpC/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772623445, "uuid": "63b8a3e6-ee54-427a-b324-03af33297889", "value": 5900099, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772623445, "uuid": "d27f2875-1ef1-4da5-8e4b-9c219a8bb389", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a754f162-17bc-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772623445, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772623445, "uuid": "a0eea104-ca9b-4211-b832-e4785f096c0e", "comment": "Malware payload", "value": "147469f95610bd19ae124b3182788923", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772623445, "uuid": "066dc35d-0746-45d2-8413-147e73aaa3bc", "comment": "Malware payload", "value": "ad80d55e20df318c575950e4d1c00b40a8ed78baadd4f6b5c701b28f77f551de", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772623445, "uuid": "718b888a-3d95-46d8-8374-715504256c22", "value": "T10546F1C6F7D8A92FC8775072C9BE52B141874C028A839F836D18760C69BB5D46F5AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772623445, "uuid": "fe80d4c6-b1e7-4f9e-a05c-2c30688c6397", "value": "98304:LPVoTwrYhKjofsros5OrsbxYfc0D1BWoz5qPvrEZC0vPqmYZnXrfLR/mpClte:LGKMfyaIbaciAFvrEZpXqmY9XrF/mpCK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772623445, "uuid": "04865b09-37a2-490f-a0c9-c97f65648948", "value": 5823338, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772623445, "uuid": "1b6e1f10-257a-413a-bf10-dde0e9da248a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7a977bb-17bc-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772623445, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772623445, "uuid": "5fe84f99-3c81-443b-801f-aae5024592bd", "comment": "Malware payload", "value": "9571d82bbaf8d0a6b8c71e5dc19304be", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772623445, "uuid": "663e0197-2c16-4a96-bc29-c2838a023884", "comment": "Malware payload", "value": "4a7b11e680a27611b1bd7ff5894408d1085bc9f5ea47fbea8c28e2e191e8eb9f", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772623445, "uuid": "3162b978-c0c3-419e-b564-810a2575e8d0", "value": "T1B356F1C6F7D8A92FC8775072C9BE52B151874C028A839F836D18760C69BB5D42F5AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772623445, "uuid": "ea1d7047-54ab-483a-b191-b2dd57867645", "value": "98304:tWPqWAoTwrYMKOfsros5OrsbxYfc0D1BWoz5qPvrEZC0vPqmYZnXrfLR/mpClt5:4oKOfyaIbaciAFvrEZpXqmY9XrF/mpCF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772623445, "uuid": "82f23946-0a92-4309-a643-18e711effe16", "value": 5925999, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772623445, "uuid": "1684834c-148a-437c-9e1e-9a6835d9b8c2", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cdf68d2-17be-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772624286, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772624286, "uuid": "665375d1-eac2-4ddb-bbb7-5e1bccadb1ca", "comment": "Malware payload", "value": "8b7cdf7f4a2f0b8e66cb74f7b24d8ab7", "object_relation": "md5", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772624286, "uuid": "1ec53ddd-92f3-461b-827b-4aabdce4e45b", "comment": "Malware payload", "value": "bd59bb135653562210af1eb84bce0345472014b06f21c86e1bfd11e04acbf546", "object_relation": "sha256", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772624286, "uuid": "f539c1cc-0b07-465b-a498-033326d9fefc", "value": "T10391C8383AAF5A484CC30027BDB764C9AE402BB695EA6C00F4E5D055FDEF611D63B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772624286, "uuid": "f751ae17-2523-452d-ba51-51b4fbbc283e", "value": "96:d5g9d+FvvOmLmbMslf84D0lE0lLZ80lO0l60lXed:8EvOfbMsOrXhd1xW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772624286, "uuid": "0d22e330-72d3-4906-8ee1-db543e534c78", "value": 4394, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772624286, "uuid": "2fb21ed3-dcc7-4e90-8338-057739bc8c9a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51ef3bf1-17c5-11f1-8e4c-82aee05be84a", "comment": "Malware payload (QuasarRAT)", "timestamp": 1772627167, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772627167, "uuid": "f7ca4f33-5bbe-4758-b3f9-1d2eedf5f3b8", "comment": "Malware payload (QuasarRAT)", "value": "ded10e80a019b1a9031620be3046244f", "object_relation": "md5", "Tag": [ { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772627167, "uuid": "8349bd7c-6dc5-4d59-b802-bcaf1e9cb230", "comment": "Malware payload (QuasarRAT)", "value": "31cc1994f6fcbc4252908b1e45fdcd946feea3da0605d086214567143ade47f8", "object_relation": "sha256", "Tag": [ { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772627167, "uuid": "9c62524d-b404-427d-b9b5-e2cd3f9f9621", "value": "T13AA1B5552B43D96A8871A325E9A3D50CFD5E90BF201B622832AC8E0D7FF4569C7BC1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772627167, "uuid": "09c00ce7-305d-4375-b7d9-de916223ed31", "value": "96:RdDKI+ZYZN9nZIx8m23EuwvM/8tU8GdqE0/OscK:RD+679nCOysoUZdqBGsX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772627167, "uuid": "404af1e3-6d75-4262-ac70-8fdca5399d5e", "value": 4779, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772627167, "uuid": "04cd1aac-e813-44d6-b7b1-32c0336f8f42", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51ff828c-17c5-11f1-8e4c-82aee05be84a", "comment": "Malware payload (QuasarRAT)", "timestamp": 1772627167, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772627167, "uuid": "92967e58-a57f-47fb-9158-d531782d9812", "comment": "Malware payload (QuasarRAT)", "value": "2196ad6dcdc885b5d196698e9784bd45", "object_relation": "md5", "Tag": [ { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772627167, "uuid": "bf4ac707-eedb-4887-b8b4-6be162454347", "comment": "Malware payload (QuasarRAT)", "value": "d7eb98c48dd987b4b08e3383eda8ca971a231ff37ae1dc955af12ba331d86477", "object_relation": "sha256", "Tag": [ { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772627167, "uuid": "76d5ebf6-bda3-4c08-8e02-3fd8fc10a6c4", "value": "T17B51A5A53F43E8A98465B114D9D74289FDA890BD300B661071E44F1DFEF8CBA837D4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772627167, "uuid": "77b673f2-e69a-4857-9e27-569af04f049a", "value": "48:fPfe4mDgrTXj30um1eQJxWyyl2zxUj9avwNdepW7gmyWoOWLw6AUjw0:f42EuwvM/8tU8GdqE0/Oswyf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772627167, "uuid": "8f0a3612-dbc5-4772-9009-b29446c286d5", "value": 2804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772627167, "uuid": "4faf5d74-1930-4a34-a0d6-c850f27032d3", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "522027db-17c5-11f1-8e4c-82aee05be84a", "comment": "Malware payload (QuasarRAT)", "timestamp": 1772627167, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772627167, "uuid": "23c7ebc1-528d-4e2a-88e6-8ff9058f4d8a", "comment": "Malware payload (QuasarRAT)", "value": "f011482eb55e1c6927426dbc95d3fdd7", "object_relation": "md5", "Tag": [ { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772627167, "uuid": "830fd6b5-8d83-4c24-9c2c-00263082cdb8", "comment": "Malware payload (QuasarRAT)", "value": "ff4dbb67ca25bc5e18bc25bfd9ccfeb56caf1eb625e5db797e9d489456de7777", "object_relation": "sha256", "Tag": [ { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772627167, "uuid": "a04683a7-a6aa-4ae6-8ea9-9de355f0ca85", "value": "T1FAF0C0325E19191C0911C05BEA1A9D6CFCBB10EDF22946F332F44C5CC09756D473B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772627167, "uuid": "fa1ad1e1-7c3f-49e3-8fe5-ded3dc669ff4", "value": "12:/A2Nv3YyCr98okG3MMGJfQH5Drn2qYKEpannaomYydX6A1y:/A29TCnR3MMGKH5Dj2xK0In3mvdqAM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772627167, "uuid": "c0fb5be6-cbac-43ea-8e95-24af97ae9873", "value": 538, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772627167, "uuid": "ebc22900-d362-4e81-9712-15ddca6a081e", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c5b47b9-17c5-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772627211, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772627211, "uuid": "ec4fb1e7-4bfb-42f2-b40e-776b62e6f616", "comment": "Malware payload", "value": "a26f1d85e6ab839052ccafcfad4cf471", "object_relation": "md5", "Tag": [ { "name": "Generic", "colour": "#0dc42f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772627211, "uuid": "2e53e566-e399-47e9-845d-580d54fcbc15", "comment": "Malware payload", "value": "3d7b194a95e03e19376883e4ceeccb10a6ecb3a477dfe6faf7d4bb873d8d4844", "object_relation": "sha256", "Tag": [ { "name": "Generic", "colour": "#0dc42f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772627211, "uuid": "819ce42f-95de-4166-ad0b-a243479113a4", "value": "T182F7335B7E7086712F7F6F4687CA69D4A120BAE4DCB419CCA2BE1EED11043D4A1734", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772627211, "uuid": "fe39bd14-a5f2-4679-b46b-426672ee76a2", "value": "1572864:tGQpExzeVN+9bq3wF221x5xCuEVRcknCauyEuCLFVPnO:tGQpE0HmblR5xCuGXnEuKFRO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772627211, "uuid": "9071e976-72a1-4428-af1f-4536f41a4b3f", "value": 75078501, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772627211, "uuid": "5b52c6da-2ccd-4cd1-a6ef-52db43512aff", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1d924c6-dfe8-11eb-bc10-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1772628848, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772628848, "uuid": "9ee81196-e540-4318-bd10-03a6eada334e", "comment": "Malware payload", "value": "6b0fb88c187a6dbf48017f66f262edab", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772628848, "uuid": "c1ab6d9e-29a4-4f61-896c-a2f670b81714", "comment": "Malware payload", "value": "ded36b111f815e57e2658bd881beaf247be1fea999902456df83840100f5ae65", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772628848, "uuid": "9eeba474-10e5-412a-8bf1-17020c268340", "value": "B9D3128BEF368C1FDB002E7216DB4B9E6C6D395B41CBF4A8F9C1818F13A11C57952215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772628848, "uuid": "ebb3554e-66a1-47ac-8586-3585b5916ec4", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioX:p3lOYoaja8xzx/0wsxzSi6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772628848, "uuid": "ce6c72ed-9e47-472d-b512-9cbf6a159d17", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772628848, "uuid": "c6fe52a9-d660-491f-8692-bf1a5208a498", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8c096fc-17ce-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772631312, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772631312, "uuid": "992af238-871f-4d7e-a027-cfd368c3eeda", "comment": "Malware payload", "value": "056597f6e867fd6bb84e8ea0a019da15", "object_relation": "md5", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772631312, "uuid": "0b024527-f08a-4c42-8152-6c4954474df7", "comment": "Malware payload", "value": "69a82e9886c4940b175ffe6fb87262d78ba56716d3298b38ac732cf9d2d84eb2", "object_relation": "sha256", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772631312, "uuid": "243d1d89-1026-4ce3-b0e1-35070fb9c1bb", "value": "T1A386335076669795CA62597314F38E68A7327832CBBB10C7B2EA07F34D21EF063653", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772631312, "uuid": "1e5aff95-909f-4c60-8734-fa41c0305800", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772631312, "uuid": "e4c2754d-02e1-4de4-ae8e-8f7a24ed8f2a", "value": "196608:b3woUyAQZosio6JjCHguV0/ZA4X3AYS5Q0GIXezaHC6LE8YFn:0/QZo/lT/690MezOYn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772631312, "uuid": "3ade6ce8-7fbd-4804-9a78-0b6a78372680", "value": 8541184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772631312, "uuid": "7f19a872-93dd-48a7-b82b-cfb3befeb63b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68948cf6-17cf-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772631500, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772631500, "uuid": "88f677f9-9eab-4d51-943d-d20259b1d382", "comment": "Malware payload (Mirai)", "value": "4d599a5cddaf326853ae13785d375ba1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772631500, "uuid": "a876d3fd-c080-417e-b194-57aea630cbad", "comment": "Malware payload (Mirai)", "value": "ea01d20879c799450ccc2d3738f12b92027f17d2ddc26e423c780a0bc813a1ad", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772631500, "uuid": "47b0f837-08ce-49c4-94a6-90ac317161f7", "value": "T11BF32906B30C4947D2632EB03E3FABD193EFBAD129A4B644391E9B8D9172D321545E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772631500, "uuid": "79628242-a6fa-4bc8-bc29-f2b1058099e3", "value": "3072:X3Z+rVH1ZCNQxR2zuvNymBiH/cdg8avEb:nQR1ZCNQxR2zGNymwHSiG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772631500, "uuid": "7a954be1-e383-488b-bcd6-95a1e79c4503", "value": 160572, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772631500, "uuid": "d8cd0ac4-72fd-4749-9d4c-bf718789a278", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b104e882-17cf-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772631622, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772631622, "uuid": "ffa389a3-b5ec-4870-98b1-6498258c42c1", "comment": "Malware payload (Mirai)", "value": "7bb0ceb7cf2358119718e8e717756549", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772631622, "uuid": "82fbe0f2-0c1e-4bd2-bbc1-73e42301b39b", "comment": "Malware payload (Mirai)", "value": "dae27b59f55b78ff6c7430ca65c3c578081f96819b55d2bb7ae25774ca5c02de", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772631622, "uuid": "5c54be5b-703e-43cb-ac70-676969bfded5", "value": "T15D241946BA418F13C0D627B9BA9F42453323A754D7E77306B528ABBC3F8779E4E225", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772631622, "uuid": "0f6f41d0-a65e-4cc2-8f1a-bd19e2d0fbc2", "value": "6144:dWFEgXa9+WaGHkF2IAG1kCbEnK6XTAxM/RQWV:dQlaUWaykF2IA01F2A6/J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772631622, "uuid": "ef3bd5c1-8a87-4309-b997-c913f1834a25", "value": 214786, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772631622, "uuid": "ad581383-7e44-427b-b3dc-39746f2c0415", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7efe089b-2e1a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1772631697, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772631697, "uuid": "41185a6e-ed45-4eb4-88e2-ca6cd8c672b4", "comment": "Malware payload (CoinMiner)", "value": "e3bcf6c6f4d21e8a1e2789e981366973", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772631697, "uuid": "e9134363-63c6-429b-a8e9-6b286d090d07", "comment": "Malware payload (CoinMiner)", "value": "617e6896100c4289af8ec35ce7b719ea50c18d006b1e4e4c5fefdbee65b6fbbd", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772631697, "uuid": "0a182cac-5a9f-4612-b41f-3b81dccb278d", "value": "T175563351F0409836F039147A34F984A2B47DBC724B75598BB3A93E721D393E8267DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772631697, "uuid": "16dc8d9e-c432-499d-bb2b-ce65a05af744", "value": "98304:zaejLqB4eFb55TJolc0GMtAKj/gXSYG47MUkc3QDJ2dfe7u0MEGCD27/Xn:7veFb5X0f/o77MvcEyG7udlp7/X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772631697, "uuid": "dd118d90-6ead-4b19-9d44-ad68bd7cf281", "value": 6247290, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772631697, "uuid": "5871acdd-054b-41b9-beda-d6b8b651cf6b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a5544ed-17d0-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772631825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772631825, "uuid": "49af6626-6b3a-4e48-8ff1-d4250bba30e6", "comment": "Malware payload (Mirai)", "value": "ca1aa385cd9aae4b3bf680e6a884b8dc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772631825, "uuid": "a1666d45-9f3a-4006-9307-0c15846f9bca", "comment": "Malware payload (Mirai)", "value": "c20b51a14bf5cc81aac067b6a319e8aabef5e948b569e8e88b968fcdc4b980b1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772631825, "uuid": "8ffc38ef-a3c0-4215-91b5-139eeec2c611", "value": "T115838C77D4269A54C08546B0B8E4CF741F23B1C093532EFBAAE5C2A994A3D9CF502B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772631825, "uuid": "b4ba6746-1a37-42b9-bd10-4834914f764f", "value": "1536:GaITNhXCXSYzTB+LxUhLnNwGVKlr8YEzWpxCr4IoW3jRDjMGuF:GFRaSYfyxUhTN+lczWpxIzjNgL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772631825, "uuid": "601aded6-739a-4329-8b67-306575d419a1", "value": 84596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772631825, "uuid": "d576b8ac-fbe3-49e1-801c-777ab892a2a7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c64d750e-17d0-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772632087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772632087, "uuid": "532b9c3d-5caf-45e1-b5c7-1939543d1796", "comment": "Malware payload", "value": "70fd1623efa13b7fd9febbff1f931ccf", "object_relation": "md5", "Tag": [ { "name": "pw-500600", "colour": "#18cc23", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772632087, "uuid": "f9765eac-6b31-43bb-b224-a5a66518c4a5", "comment": "Malware payload", "value": "58c0c712897f8998aa4040fdc6e39ab4e4e322d8e6bb359d60eed339703073b8", "object_relation": "sha256", "Tag": [ { "name": "pw-500600", "colour": "#18cc23", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772632087, "uuid": "51f92678-0872-429d-b9e0-6382419c9c4a", "value": "T1EFF533F3720852C7E64D5D3E1BC1D3FAB9426548CBA4B0D9088E66FE646C34DE7248", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772632087, "uuid": "cd63c9ff-9b00-4c79-a7e7-bb394fb1f1b9", "value": "98304:34XntmCXkRbVHffvTeTDNHZNcFnaqehrKDp:3Ativy3drK1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772632087, "uuid": "4e5a8341-f2b7-4d88-ab68-e4506ebbc69b", "value": 3418015, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772632087, "uuid": "6c0286fa-6bf6-4b71-a269-16182b0a1e87", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5933be27-17d1-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772632333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772632333, "uuid": "a88b56cc-bc59-47e7-8ec1-dbe5f4cb6d08", "comment": "Malware payload", "value": "b972ec358e7c936bb4c2961eab2efcf9", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772632333, "uuid": "24bad646-ff95-4d06-afc9-d3a675ef6fb7", "comment": "Malware payload", "value": "66f7ed213d96e0cbc894eb1fa0b65b376fd4f2ca57cc70ff30da3b7468fa9175", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772632333, "uuid": "69b5ebdb-4185-4fae-b76f-076ac7790202", "value": "T16B423F2115C46033007AA18CD5AAAB4CFFC6810FD792CA05B6FC62EF6FF2DA1D9136", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772632333, "uuid": "8aa0bb61-bb6f-490b-a563-35c0e8874494", "value": "192:zBl1qSj1MHbMHekzhLUWq/lpEstjOkspjHo7PNs2:cSuHbMHekzhLUWqwsB4k7PNs2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772632333, "uuid": "e9d1a84f-ba28-4f62-80f1-e4bc2b5f172a", "value": 12950, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772632333, "uuid": "2e4a2dc4-beec-47ee-b286-44a913f07620", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc747f93-17d2-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772632929, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772632929, "uuid": "002476d9-8548-48a3-aa5c-4bc22c2035e4", "comment": "Malware payload (Mirai)", "value": "234e3e6d701eda25d1fab94d80d683e9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772632929, "uuid": "592f383b-1278-40d0-8dfc-429e70f63984", "comment": "Malware payload (Mirai)", "value": "ed4eedc3100f705e8a94ce3249a17a0a8dba2fc7e09b12b5c0eca89306aef87e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772632929, "uuid": "900ca803-5e76-4598-b7f8-207c6f711f29", "value": "T1B013F133DD849FC4FF67AE242E42A7EA63770F61BAA08CC35054C5D3BF6417969009", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772632929, "uuid": "5dc0e0b6-1880-4a0f-a214-3671ed663000", "value": "768:WgJUb/K8mUrwl1NX1hGzM8uccTwwvS58xZZB+TIYUFynMEoOr24uVcqgw092:32bi8mUcl1NXmujHS5GZ6UNynMEl24uP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772632929, "uuid": "d450e4ed-2572-483a-af27-85f5a2f366f0", "value": 42004, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772632929, "uuid": "2d86d3c8-6180-4568-a55a-62515a5576e3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42d60383-17d3-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772633155, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772633155, "uuid": "c2da2026-15aa-423c-80a1-d70135db5c67", "comment": "Malware payload", "value": "274b2c6dfc4335877d2700c90989c1e7", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772633155, "uuid": "4f0e3f8b-7383-4f97-81ac-739b6c6c73c3", "comment": "Malware payload", "value": "eeb42b531b7430889db6f1cd4add82eb3ebd78e748ae1b9b64023ed3a1bb1e6d", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772633155, "uuid": "b958c62a-1b07-4a6e-89b4-d15abe779b87", "value": "T10602527DD6D1BCD0475B32C178AAFAC6104A8A17AE7B2E6CE5C501E10B10354EFBA6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772633155, "uuid": "1e9cbd4d-ddd8-4f97-be1b-1374dfa11e8a", "value": "192:w/Ezym9CKGwb6ZUVNrfspaNwow2ed9lgA8dGe3J:wZm9CGDVNrxNw32ed9yA8Ee3J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772633155, "uuid": "7b435f7d-5ab9-4637-a78f-4b04680d69f0", "value": 8670, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772633155, "uuid": "8dcbcaf1-9462-4e68-826b-f3f372167273", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45612b0a-17d4-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772633588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772633588, "uuid": "81ff7d67-c946-470d-9498-612e1a10c006", "comment": "Malware payload (Mirai)", "value": "cb4de9c7906e05b1db357e4310a9d85d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772633588, "uuid": "0bf24905-e6f7-4c72-b121-307147d9a62a", "comment": "Malware payload (Mirai)", "value": "2e28f54c8b8a91783dce23e97acede8aac0bf4844ed85a7c9a94e1705de35e5c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772633588, "uuid": "1e82c2b2-9412-4ba6-a8b8-25e2e57944e9", "value": "T1E7F33A06B4C1C4FDC49AC1744FAEE536E931F49D1638B26B37D4AB2E2E5DE206B1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772633588, "uuid": "07b722c1-38aa-4c4c-91d4-47f5b9929869", "value": "3072:cthGeFy2IlZ1vKGIo6+V514Fn8FtUGnK2B/ZGNmGEmc:cthGR2EfdB92mxn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772633588, "uuid": "f15950b9-eb23-45b9-9b57-672bcf8529bd", "value": 164296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772633588, "uuid": "22327063-e167-40b8-bc96-b309925dc608", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50769046-17d4-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772633607, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772633607, "uuid": "b06f8c59-60fd-46ac-b746-4459cf20cc0f", "comment": "Malware payload (Mirai)", "value": "3f9c5f03ebc995342c53235f90d3f5e5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772633607, "uuid": "d1fa2f50-ef1e-4c21-a1af-e054732a7dbd", "comment": "Malware payload (Mirai)", "value": "9b74c3e233c6a8f3b5e76e2b537987814de5378f3b31cf9fefb1ce473d731c27", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772633607, "uuid": "3dcec643-5afe-4b07-bf30-9bfa65c4cd6d", "value": "T1E32302C8AD46F6B08B7200F594DBD047AA8E4775885E364336C4150C88B9ECF53BA7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772633607, "uuid": "593f4754-5f87-4c3e-9f5e-0ed641b090b8", "value": "768:JENYiPvToMcT0AhEnf23MDhXB87uPpk25VKSsMj1j9q3UELlW:Jov6TQf2c9XBAckCKvMILY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772633607, "uuid": "7c826c15-36a7-4ede-aac8-4e0b896b67ef", "value": 46832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772633607, "uuid": "346e21a8-8d82-4727-9ff3-fcfefabaf1a9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7127dab1-17d4-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772633662, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772633662, "uuid": "c9cfa52b-4c96-4e45-9615-08b4e51d11d8", "comment": "Malware payload (Mirai)", "value": "9160fd37e928a024a3a3b41a87c7fcf5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772633662, "uuid": "0127b4ff-1732-43aa-a0c6-82c29710fb74", "comment": "Malware payload (Mirai)", "value": "267ce47e40a559a36e7c6336898019be9f9d6f9799418fd3f5d072ab2499ccb7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772633662, "uuid": "b7e3b2f8-0360-4ac9-ac37-2a9d4d3eefe9", "value": "T1EFF3E845F8519B12C6C6127BFF5E828D3B2627A8D2EE3203B9255F2C378795B0D3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772633662, "uuid": "50ca1c07-a8af-43a4-83c0-e94f940971fc", "value": "1536:RqXZGW9XPZdhJ/PiuvRxVBwjP7jB9AymX4VRk7T5GOzUJvhbhOsx9vIJHb1Ml44F:RqJGi6QB6PHB9k4U7dGOUJJx47SRC8X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772633662, "uuid": "3bd43696-4aa8-45a1-b840-85b658f08581", "value": 157792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772633662, "uuid": "a8654df4-4385-4af3-a2de-e7072fce2f05", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2e161cf-17d4-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772633826, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772633826, "uuid": "35356cdd-d8cf-4e40-b421-b9b26d2be600", "comment": "Malware payload (Mirai)", "value": "a53f9413e0b952daae98a59f0022dcfd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772633826, "uuid": "f08a2a2b-ce6e-4c96-b853-7e8790dbd16a", "comment": "Malware payload (Mirai)", "value": "98006513b055d98a7ce679aa4845dd5273f1cccdde2a927dbc116cda4e2b5ecd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772633826, "uuid": "bd7d2bbb-a5b2-4000-8fea-b24ce7ddeeb6", "value": "T12513F1A227857E80C324453ADABCDB843693EF7D95B4FDA36159018D81C8C0DB778A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772633826, "uuid": "80acc0e9-a478-4f4f-983e-6ef5aea475cf", "value": "768:xkg6xJxanpRwuViQZ6GzDdj827dbXb6qRi2sStYDjs3Uoze:xQK8uViQZ/zl8OpdsStYDOze", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772633826, "uuid": "89b50b59-b9d3-40ee-a442-6a4ff7c8406f", "value": 43700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772633826, "uuid": "1d4c617e-6c2d-4824-b13a-cf334f3050f2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d96d550e-17d4-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772633837, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772633837, "uuid": "fcbd1ab9-5b5d-4b04-ba86-e24eda70d7a5", "comment": "Malware payload", "value": "eecc6c19c5aaeab6e46a17fea411be4d", "object_relation": "md5", "Tag": [ { "name": "Generic", "colour": "#0dc42f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772633837, "uuid": "ba605265-3299-4fe5-b14a-339dc2c53def", "comment": "Malware payload", "value": "c823c6d72fd5111a288b6f29112d89be96c5ff7030a0613fd7eaee5ba5b8270a", "object_relation": "sha256", "Tag": [ { "name": "Generic", "colour": "#0dc42f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772633837, "uuid": "501730e7-dc48-44a2-9037-23000ffd98f7", "value": "T17FF73357BD608AB52FBF6F064AC6B9C4A124BAE4DCB05DCC62BE1EEC11053D491734", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772633837, "uuid": "1c9f7d89-7ced-43de-b65c-d90d02e3d1f5", "value": "1572864:7qedIvV+/5KVHMX0JSmX1b1gKWB3Sut0IAYyIA1V7Dv6f9:7qedIAxSHXLb1gKyPtiIaV/6F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772633837, "uuid": "65e89b71-4422-42c7-86a8-de84e716591a", "value": 75114305, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772633837, "uuid": "09a7da44-1566-4c09-bbaf-59f3c2ec2c13", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c268163-17d5-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772633976, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772633976, "uuid": "9f58306a-8c4c-4bd9-bb1b-63903a087061", "comment": "Malware payload", "value": "650713fb8f353f88bcb0fffe6933e079", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772633976, "uuid": "b3dbe37a-d5de-4e61-bbea-41c1dbc8233e", "comment": "Malware payload", "value": "f82a99efa0b1f2acf212b26148a6e81a1dbcec0d0eed2f655e458fe70cf84a49", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772633976, "uuid": "0fd0731f-94b8-45b1-9cfc-cdb1701daad7", "value": "T1288308327589582A210B028FD263336C70EFD8E2D611E5B6F6F922344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772633976, "uuid": "d79c3282-0507-4f7d-82ba-1308ce490fb6", "value": "1536:XJyp/QdMqpYJKNoCtpxD3t2ZSDXpdyr2pbngWaXVN/:XEKltp9t2SX/yr2pbgWaVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772633976, "uuid": "346ec810-70d9-40e3-a3c7-ecc0c528987a", "value": 85051, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772633976, "uuid": "b5ed3ade-dcf2-4e82-8166-afeae0e28595", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0d1b389-17d5-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772634171, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772634171, "uuid": "405c5867-4483-480b-9438-2553f027b0b2", "comment": "Malware payload", "value": "ab31eb5466606a1070fa0c8b50171a87", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772634171, "uuid": "a5a3173e-e47c-47a7-a62e-30c93416dac6", "comment": "Malware payload", "value": "5e6835a4df76c1c33b75056d345ce9169cc0d115e2f63826c599037be14c45c4", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772634171, "uuid": "2c6acbcf-556b-46b5-b521-3317ead7667f", "value": "T10334F06D0984D32371470AB9D22B2DCB0599B1ED46E72283F6190560F548ABFB38FE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772634171, "uuid": "c2e4e0f2-4f5b-4475-afa1-47a022843ec6", "value": "6144:yAEA5RSvfyaAwTTEkocY9WfISXrS+rA3a:kAgfytwT9JMWQezia", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772634171, "uuid": "a43ea6ae-bbef-4c7a-81f4-698b6776f743", "value": 239700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772634171, "uuid": "211361bf-648d-434b-b8c7-d4150d3e8019", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf4fa829-17d5-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772634223, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772634223, "uuid": "56fe13db-1b7e-432a-8128-ecc6d90176ed", "comment": "Malware payload", "value": "879bff72626aab3dfe319dff674643b3", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772634223, "uuid": "df6b4010-8e85-4c44-a64d-6dbdec0e9091", "comment": "Malware payload", "value": "7d93ed2dbbae78bc793d782b704786799fd4326f1ccc184570e372113be838d7", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772634223, "uuid": "1a46d717-4882-49d2-baec-576563f1a172", "value": "T169A20CAC83B206F0A763FB91514105BC78E2EE93EE96A507053588FDD8C947F63937", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772634223, "uuid": "806047a7-517a-4dea-8288-6eacc9f3cbe3", "value": "192:U+gcmlv+4+l+u8E7dOz1wD99K/PYzl2cwiaN+TX5oFsCZcSA+0WE1QEncQzxKrW/:XmlYVbdS1wD9c/saUsZAr1QJG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772634223, "uuid": "b1f5efb7-a23b-4a65-9f31-1fb159a92f0b", "value": 21402, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772634223, "uuid": "151568cf-6a27-4765-98a0-ea25b7567687", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d38f6f9f-17d5-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772634257, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772634257, "uuid": "9ed042fd-4b25-47ae-a7d4-cfda28b4b9be", "comment": "Malware payload (Mirai)", "value": "abc5b26bfe26ebe22baccc229aa526bc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772634257, "uuid": "9a7605c2-9d4d-4fae-bb61-6c0783e9cc3d", "comment": "Malware payload (Mirai)", "value": "58c19ff70d5aa42de12550893b06726298e7e0f6e28364a4eb81590bb6699ad3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772634257, "uuid": "b74e093f-5527-40cd-97bb-5a7c1f96a406", "value": "T1AC13F1DBF433FBBCC979B7B258AA66B43C2289046EC65779068533DE8CA46152E31C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772634257, "uuid": "21a98daa-d3d3-4ced-ad6f-7d548d6389fb", "value": "768:qfkDAxZGiI4T+/YzlteuyfRpzmevvhIkQKjFfVKU40ZNWkfjv52zRNmdZx0F1:GpgiI4OYBteuupzmenhIkQKjFNKUVtQH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772634257, "uuid": "7c3abf35-46f8-4e81-b73f-be45eb8636c0", "value": 44736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772634257, "uuid": "2a2d28f3-1199-48cf-9401-d8c83b77f04c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "555dae9a-17d6-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772634474, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772634474, "uuid": "16974d8f-352e-474e-ac30-981fa3754671", "comment": "Malware payload (Mirai)", "value": "2f7e845e28e95caf35ab2f2633b477e6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772634474, "uuid": "7455d527-52df-4896-96f1-fe3baf1c4a75", "comment": "Malware payload (Mirai)", "value": "c56fca3e5096a3948c614994e6d5af29d31b0e000f008458fe4d470d79c08651", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772634474, "uuid": "9847bc89-dcb1-4148-8916-a4e5713dfb1a", "value": "T1B1241945FA408B13C0D627BABA9F42453323A754D7E77306B524ABBC3F8779E4E225", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772634474, "uuid": "d352f274-6f8b-4445-8b05-1e94bb0e5213", "value": "6144:I2e7NIFXm8asbYaSoNcqk0VnKiXyBSM/RSvUV:IvGF28a8YaSoNdXU/B7/t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772634474, "uuid": "79c338db-971d-4b18-be67-83dff47fc870", "value": 214258, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772634474, "uuid": "244850e6-9e72-43c2-afbc-c53cbbb98770", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "917f2dd2-17d6-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772634575, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772634575, "uuid": "e421899e-8791-4ba0-9bea-b1a107e4840a", "comment": "Malware payload (Mirai)", "value": "f00ddc42ca5ee1c67da4e4838bdbe7bf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772634575, "uuid": "a01b70e5-1328-4837-866d-673ed6f02860", "comment": "Malware payload (Mirai)", "value": "b3a23470547074cad8a10344445a62060a0b729ed7faca76401534b106d9ffd2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772634575, "uuid": "98a7a40f-d69d-48c5-83e3-1fe8d36b25eb", "value": "T19E13E1BFBF008DE6EDC9C5B452E64BE10EB90E51B613E84E694BD5432E524B29843F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772634575, "uuid": "9de4189f-e359-49a5-b48f-02630b21519f", "value": "768:AYIbS8sDFK8lzjqSwhOK7l6DkXZ13JWgGtvZHC5NYdd6fP3qeV9gxJgGlzDpbuR5:APG8spKe/LwnB6A7JBG3Cvi6X3qaoVJY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772634575, "uuid": "03c4f9b3-ec70-4bd8-a178-e56009b0dcd7", "value": 45540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772634575, "uuid": "ba2ac247-b393-4ac6-8b7b-5c71a5af895a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce1c0631-17d6-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772634677, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772634677, "uuid": "67b1d016-8c2e-432e-bc28-b25177d5aae8", "comment": "Malware payload (Mirai)", "value": "2b86a294d18d0bda2f7de7c4f9ef568a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772634677, "uuid": "160a07ae-ba28-40d0-a76f-05a1f029603c", "comment": "Malware payload (Mirai)", "value": "ae8aa6bfdab34183c9ed540cbc0fda416e01fa0b3104bdb251bf07828b5abb7c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772634677, "uuid": "6651ee65-72f5-4ad1-8a46-c365c9520784", "value": "T16E43E665B892D957C2C01376BE5EE78A332573E4CACE3323F9255B2C3A8651F0D26E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772634677, "uuid": "03aa82c2-ac35-4651-bf51-47421b09684a", "value": "1536:DB15SKZG2IXG5/alSuv3EUKHzOT0WgsIR28:N15SiGm9CmWBIM8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772634677, "uuid": "da55215a-96a2-4cbc-a537-8c23d006fc93", "value": 55888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772634677, "uuid": "9c39dd20-0c1e-4b94-86c2-fe9a21892273", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ebfd620-17d7-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772635027, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772635027, "uuid": "a6a37288-40ae-4c1a-87df-ce884ca19035", "comment": "Malware payload (Mirai)", "value": "d43620e2b295808c98499728cc7ae832", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772635027, "uuid": "0e3b5aa8-175a-4c52-ae2d-f0ad45153a00", "comment": "Malware payload (Mirai)", "value": "6ffa7b2ea0fa89619efea10133495b391b4a3a7f2dec6bd3974f81f0f2dd6562", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772635027, "uuid": "119ff63c-fccc-416d-adf1-ada0e16fc170", "value": "T1C314D70ABB510EBBD8ABDD3709E90B0239CCA54726A43B353674D72CF54A54B4AD3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772635027, "uuid": "58a6978a-3e1c-4ac6-ab9c-39d7e1e8088a", "value": "3072:CVcQwFO9bwC+LLJFcK4xwXDkpZs+6c7ffZ8cKB:CVcQwFO98LL14uXDIp33VK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772635027, "uuid": "6a6bb926-a910-491a-a069-4d6e24aa77cf", "value": 209332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772635027, "uuid": "6e3f2bdc-ddb5-48b8-89f5-fdecb16e4c5b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1fab6828-17d8-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772635243, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772635243, "uuid": "fb87156a-7197-4798-9f0a-8258cbb7859d", "comment": "Malware payload (Mirai)", "value": "51c5f4d6ca8265090b461b40893a71d7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772635243, "uuid": "6c179591-86cf-4ffd-844d-02bc8a730eb7", "comment": "Malware payload (Mirai)", "value": "330ff89110d4ee9825104210fa925d805b8cfeaf8ad6669a2c39a1c9c70db939", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772635243, "uuid": "ac226860-fdcd-49f8-8856-4c63e0da4dd6", "value": "T1B6A34B26F9351A27C4C0A4B621F74721F6F247CA26A88A1F7D720D4EBF356403653A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772635243, "uuid": "5f0ae8f0-0136-4192-afdf-043a5a0bba7d", "value": "1536:CnzUSkaU84lUDir3yD3y60sPXFntkVzlrgtfHKF5W10JFVtw8856C:CnVqXWDPL1q328hC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772635243, "uuid": "98f4ecf3-a607-43e3-926f-0db0486b137f", "value": 98040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772635243, "uuid": "7c05c0f4-6a21-4277-88bd-2c5e7977188d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "865770f2-17d8-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772635415, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772635415, "uuid": "9f28650e-0a39-4494-b482-8d75d7908622", "comment": "Malware payload", "value": "a64650e330d6dfd86822a7b79b5cc37c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772635415, "uuid": "fc4cbdba-3562-4c19-b44e-6d810db6ee13", "comment": "Malware payload", "value": "3788be6cb38d35f600caa5db5d2cc98fd4e204f81e7f0a345c8b293aa709ad1e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772635415, "uuid": "651fb080-0cc1-425b-989b-0c2b4240bc13", "value": "T14534D06A2F46948B33F774F14D6EEA16921FB4DAF763451038C4F48D24BF8CD82968", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772635415, "uuid": "a23df2af-0846-402f-bbab-74a4f57de1e8", "value": "6144:/A22ORNd7UuSww/z4SvFIBxBL4np1gETZL0Mw7wLt8qU+p:/ndO/0SvFIrBL4zFYVO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772635415, "uuid": "3a775482-8af2-44a7-9ff3-58829890a59a", "value": 247892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772635415, "uuid": "994604fd-b9f8-4785-bc91-edcee2c94c03", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "871f4af7-17d8-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772635417, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772635417, "uuid": "5101afa8-1c06-4ad6-a749-4488c986dd40", "comment": "Malware payload (Mirai)", "value": "b9db978cdc38a8257ce5e5093e0110e3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772635417, "uuid": "76f3404c-48c4-4939-b68f-b7cd8cd49aa3", "comment": "Malware payload (Mirai)", "value": "c94b7ad766892ea5a71d26f37385df362505927cf9158201ec0e387b220d2f42", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772635417, "uuid": "36927a3c-2290-48f8-a96c-2ca57688abba", "value": "T16563121B49631983D489A032C2B501D2B2159AF4FFDEDEEB552D1F2A4F291F709B2D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772635417, "uuid": "57be0548-ce11-44dc-b6e1-f55af9e46ea5", "value": "1536:JdkBqsTDLx0of1ZZOZGnllODzqoScuLPSFXk+kfHs:JmRTPNzO8nllOSHJLqFIs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772635417, "uuid": "49b51a06-6418-42f8-88eb-d2588507580a", "value": 69064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772635417, "uuid": "b49b3f57-7b45-402c-b8c0-c3376adc5cf6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c2d9310-17d9-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772635801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772635801, "uuid": "3563c40e-7b06-4de7-8898-dab67b05d81a", "comment": "Malware payload (Mirai)", "value": "fe66b170d45ea8400866c0007ffee6b3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772635801, "uuid": "60b07945-24f0-4dea-96ed-91339edcc7a9", "comment": "Malware payload (Mirai)", "value": "fc1a26afe92ac38e07f19e3e24cec21d9417999f18abd9dbd407a5d277394ddc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772635801, "uuid": "15e9b90c-eeb0-43bd-bb85-7127ea3e6f01", "value": "T18C0429C7F801DDBAF80AE33608534906B530B7E248825B3772577B6EED3A1951927E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772635801, "uuid": "64b83f40-eebb-4efd-ac1a-9a72c8aa654e", "value": "3072:Tc1+STb8vzskvJeTKZ/yZt4rIFJNkQwEqiKoTVwjbiJLbyxTxfoteD+4NX:ZST0s0pyZOrInNdPKolLbyfotTE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772635801, "uuid": "77bf880f-86d9-44ff-9b87-533daca45a07", "value": 178080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772635801, "uuid": "40acfb79-8320-4d0e-9f96-d6344971e167", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16289159-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772636258, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772636258, "uuid": "206af51b-26af-4561-9351-dadf67594407", "comment": "Malware payload", "value": "aa5fde36cb0e26ac7973b0d983884490", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772636258, "uuid": "2913a5a1-4bd0-4b40-93cc-39fc395c9276", "comment": "Malware payload", "value": "69ac6c1019c3f7133eb97a21b174ba9e40dea7c36a52170a5a8353d28bdffab0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772636258, "uuid": "15d66a76-1e37-431f-9078-e38c3a397d67", "value": "E703028632953F73D51148F4E7FCAFCA714ABD54EFAA142FA8113A15B07235D24C982A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772636258, "uuid": "bcaf3225-8680-4cea-99b3-c6230dc40f5e", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTo:yYI0ARqw1qAEW67UIWi7M8gmo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772636258, "uuid": "b843a598-d6d6-469e-b10a-a84291ccc0d8", "value": 40544, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90780539-17da-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772636291, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772636291, "uuid": "256048a3-8f00-4232-b0ea-c123e9669197", "comment": "Malware payload (Mirai)", "value": "abab9d0e8d1b4e97472d8e56f8e8cb95", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772636291, "uuid": "8d0728ad-f034-498c-b11f-253f8d0c000b", "comment": "Malware payload (Mirai)", "value": "b8e4c6f2101ca4cdc26fc7629a78d1f7122401e50f05a5a55ee700cb479c9dbb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772636291, "uuid": "50ec101f-ba0b-4371-a33a-2720d7b062c2", "value": "T159B35BC4F643D0F1E8570571183AE7365B32F4B95829EA43F7689F3EAC62901DA0AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772636291, "uuid": "25f3a499-05b5-4b2c-9385-bac9f8648dad", "value": "1536:QsHSxOFHH+uO/D9QrfQ5HFSgUNqPDQIWNJVb0SCC+1blcF2VV:lSxOF+uO/KrfolfUuDBWphmC2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772636291, "uuid": "e6d7b509-672f-49a4-9b8a-8e076a870474", "value": 116300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772636291, "uuid": "e41bab89-ffcd-4344-b038-c50502f42740", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5587823-17da-11f1-8e4c-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1772636326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772636326, "uuid": "fea85886-7fd1-4cc8-848d-afa1989b691f", "comment": "Malware payload (ConnectWise)", "value": "dd0f6f66b0b7b74737d5b2b8445272bb", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772636326, "uuid": "de6369c5-f437-4a25-86c3-d464126dc190", "comment": "Malware payload (ConnectWise)", "value": "6fd4c43971b841de687138211abebb9543e0bf3d8a1080966dc9aa890fd87ce6", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772636326, "uuid": "bb346360-561b-4a10-b557-1abb9c506f9c", "value": "T1F6D6221262FC4125E5B71B3AEA7A86F02534BE74DE12C06F57143A0D2A72F80C9B67", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772636326, "uuid": "10099a36-8762-419e-83b5-8ae2148929c2", "value": "393216:gT3dRx9fdT3dST3dsT3dRT3dKT3d4T3dF:o3dRrx3dC3dU3d13d63dg3dF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772636326, "uuid": "d2e581d8-3d69-4fb0-ab0a-56896d55932f", "value": 13414400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772636326, "uuid": "48883723-523b-404e-b23b-70982af90585", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15e96816-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772636472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772636472, "uuid": "472218da-ca18-4b07-bea8-52b8e464035d", "comment": "Malware payload", "value": "99554a8313b0f99ebdaed9126d32bcff", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772636472, "uuid": "18315980-fd5d-4d57-bb37-d6d78621bc8f", "comment": "Malware payload", "value": "2791990fec00623e0c62081b8145b3aa2d9b00e145a8880ff66fc4a025cc8e4f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772636472, "uuid": "38fafad2-efb9-49ac-aa37-815c8316cebd", "value": "E953120223AA297196B14AF1E7FDBB88E6493D588FF66C15AC113D6CF97235D1CC8908", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772636472, "uuid": "99526a5d-353d-498a-a5ef-735ffe09d135", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8Px6:yYI0ARqw1qAEv7UIFM8oJorFquyj/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772636472, "uuid": "cb9dce24-32ed-4063-a5f9-086913b2d2fb", "value": 63712, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af40532a-17db-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772636773, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772636773, "uuid": "a3398009-0f7c-4f86-ab88-ee49dc89f64c", "comment": "Malware payload", "value": "7725c85cefeea2e975b57f75c31ce1dd", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772636773, "uuid": "1a16c2b7-56f1-470c-aba4-2964c96a9a51", "comment": "Malware payload", "value": "9793222933a587ff53249a41a903810de6d5fe8a34f992bb81451f7dc2944d48", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772636773, "uuid": "2e941757-638e-423e-aecc-62972bf1fd45", "value": "T194331A7162320B7B028F91B9F454FF999196C39DDB078F4761FC86A71BDBD0089722", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772636773, "uuid": "7dce07b5-4ddd-4cb5-909c-8f9e61e87927", "value": "768:1YRPcxHtQ/zB/VvthJvQXgKlQCsi5FCRTKhAWN+kEQL0n5+Db+E6VIaOWBVSsup5:WRPJvvCwKEN6kE1N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772636773, "uuid": "b20c14d6-6864-4bb2-a471-3806d73a91c5", "value": 51933, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772636773, "uuid": "ccd15647-f9ec-479f-82cb-cff8d29a4a59", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd466d9d-17db-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772636850, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772636850, "uuid": "670aa44e-59f1-4181-a1bc-5697e18b5de2", "comment": "Malware payload (Mirai)", "value": "bc535acffb0e2ff2a780a5ed9918058a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772636850, "uuid": "67634919-ea13-4bf2-8438-777fa83b6965", "comment": "Malware payload (Mirai)", "value": "e7c1477285d0a1e3df2c1921ccf25f94f306c355061945da7ff2e23acfbc8bda", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772636850, "uuid": "9dff6d9e-8ebe-4126-8bbe-2dbc72ea4f6b", "value": "T1BE13F123A4E9824CD2CB72F0DDC9376F1A78201295189976EDE4C03EC26275D6A7CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772636850, "uuid": "1b46ee60-a8c6-4ad0-bf6c-5dbdfa8284c1", "value": "768:argJPrwSYkYP9z/PJZnAwjipFXcJw8IjD5tagkkmvX8eAGbZFXnbcuyD7UHQRjf:MgpN6FPJZnMFXcGPgvM0VFXnouy8Hy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772636850, "uuid": "4ddd664b-3ad7-4f44-a32f-a1c96a261b75", "value": 43364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772636850, "uuid": "83f12431-06a8-422a-91b3-1be86e4fd2e4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5aced3d3-17dc-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772637060, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772637060, "uuid": "021385ae-68c0-4446-8eac-04b8f1168be8", "comment": "Malware payload (Mirai)", "value": "f1db7ed5c268888816690c27b7d472e2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772637060, "uuid": "be71f3c9-3b2b-4cf3-98a6-c2ea7344a98a", "comment": "Malware payload (Mirai)", "value": "ead7ecd7e4a0cf483f209ca53e74df83161249c3695fec70703f4a7ab971fdaf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772637060, "uuid": "8617b743-2491-48d4-9c64-b34db1ade36e", "value": "T1F8A34B97F440CDBDF84FD77A44570A06B571E3D20A830F26666BBE63BC721954863E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772637060, "uuid": "24942448-59de-4cdf-8a43-8658a4254dc2", "value": "1536:f6juxy0IDH5b1usxR4mwVbYN10bj8L++he4D34MP1lZX/otEacQ3TtR8T/Y:f6juxB7xYN10bUhd4w1TkcQ3TT8T/Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772637060, "uuid": "dcb4441b-ec72-47ed-8732-6203f5e7431c", "value": 101084, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772637060, "uuid": "3aba7614-6984-46e3-820f-9d8f5b84ce34", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93af0020-17dc-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772637156, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772637156, "uuid": "12addc93-cf0f-43c4-b306-b5c85c4ed78a", "comment": "Malware payload (Mirai)", "value": "13eb09bcb6f24676f206c216ec6824b0", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772637156, "uuid": "51e67407-c9ed-49ae-882e-ff169ede4ba6", "comment": "Malware payload (Mirai)", "value": "ec9b01ca07e25e58a090b0f43db2a4990935b24cb3b5cdc10a9565ae09a46d05", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772637156, "uuid": "086626a0-14de-4637-b3ea-36572c87dcb4", "value": "T18853027D376EA1D891650F3FBC7488C067AB0FB4D07E060EA3C2C99A9AC137AB9715", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772637156, "uuid": "65ba8c6a-c360-4144-bda7-b3eaf6d88ade", "value": "1536:YPnrJEXlT38rkSw6Za1iR4RM4Lrgtpfjy+QYS18Io4s9N8ezP:KrgT3kOR1pHLEtpfjy+QD8944N8er", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772637156, "uuid": "9c28fced-b5a5-49d6-b7bb-20f16e2c6d5f", "value": 66012, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772637156, "uuid": "d7ef9ee9-7899-4bdf-a330-ee6f5496dba8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3f6097b-17dc-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772637210, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772637210, "uuid": "e6ab88cc-05b2-4d2c-86bc-1efdf44139b0", "comment": "Malware payload (Mirai)", "value": "56b9fd67f554e318932723b14181f0de", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772637210, "uuid": "24f20412-c908-4a60-a59f-295e1ba0ef64", "comment": "Malware payload (Mirai)", "value": "3d4c2c3574de80f65a52a359b07bd21e25a5065056a75662c3428780c34d7d82", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772637210, "uuid": "0d1815fd-11ee-43b4-add7-df20ce36957c", "value": "T13F630261532AEB3694E0487A8E3C1A1B7FCC6EBCE34B66735F5805D51AC34C2E9C6D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772637210, "uuid": "13b4aa31-b62b-4bfb-8f99-6c9bdac2a8d9", "value": "1536:yebC+5BUMqDaXajTTENpjEYMoPDaktKRuov3yF3gdIa/Ll:y4h5BUM+aXsieporrKzv3yF89/Ll", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772637210, "uuid": "ee8c272d-7e5e-4c4e-8f5f-0aff06dfe70e", "value": 71400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772637210, "uuid": "d1f1f8a8-0b04-418d-8e03-7693bc4d747f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "689a2391-17dd-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772637513, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772637513, "uuid": "222a94d7-1d58-4a20-ad5d-e0fdeb78fb03", "comment": "Malware payload (Mirai)", "value": "985abe4c1245f902db8d4acc127f107b", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772637513, "uuid": "1bbb0427-3e56-4941-b0d2-cd2f74578337", "comment": "Malware payload (Mirai)", "value": "596a2797dfa0342cd84fe9661272be831309b187591669ece24514b9a23fbfd8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772637513, "uuid": "024a7858-f999-4854-b3dc-056a5970ecef", "value": "T16EF37C62C870AE98C6258574F021FE3D6B539AA645871FFA199BC7714047DCCFA0A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772637513, "uuid": "1fb8dc7c-e53f-46ef-a9a8-9b64a490ac8f", "value": "3072:nqRlminee0PIMHsx42zEbwbL/AOXc42KAlWCSIHMLgB:nq3GLsoEbL/3C3QCxMLgB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772637513, "uuid": "3518be57-5f0b-4be5-8a29-8e7f43001c3c", "value": 157540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772637513, "uuid": "b79414c9-f674-490c-9b11-bc99206e6fd4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf943b5b-17dd-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772637659, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772637659, "uuid": "55bb9931-6f3e-41dc-9c59-3b38cac79813", "comment": "Malware payload (Mirai)", "value": "867387eafe042c8bb63166dc68dfe225", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772637659, "uuid": "fe30146a-835a-4082-bf0f-9c41a2347b6a", "comment": "Malware payload (Mirai)", "value": "3574a9b7db122398adce1896d6b435c0250ae1fdb51d344af64d81a117e9a113", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772637659, "uuid": "a26159f7-ba98-407d-8a8f-c557414125ee", "value": "T1491302B396E83E84818B1079117D3C23969EF519039589A63AAC606349F7F1EFF702", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772637659, "uuid": "ce90f9e7-b410-46ba-93a3-fd4adfa67db1", "value": "768:CIOuSt5m9TCsd24PAe3BO0Fv/FnG8DPNgyuOy/kVrnbcuyD7UHQRjN:CIOuzhd2UAevv4S+y7N9nouy8Hyp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772637659, "uuid": "b73aeb6a-f166-4dda-a243-06cf572b3135", "value": 42096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772637659, "uuid": "5d4c1cd3-8702-46bf-a7a4-b0cecaf553cd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "176e0184-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772637677, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772637677, "uuid": "74062926-99ed-4396-8f37-8cecac818b43", "comment": "Malware payload", "value": "356bf51b47509625d44a85cb30400349", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772637677, "uuid": "c69691dc-3a62-4640-8c27-0f9f5ca00698", "comment": "Malware payload", "value": "83f1cc08c430107e70a2976aef153eb5e8f25fecc561f4a55d226158c080ace9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772637677, "uuid": "c2567bbb-1752-4c69-949d-a3d9c4091ad5", "value": "CA33024623A63AB6957188F1A7F8FF49F14A3DA89FF51C157C217A58A83236C28C4D1C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772637677, "uuid": "91c89d6f-fbfb-4333-90f5-be92ec553a99", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6EfA:yYI0ARqw1qAEv7UIFM8oJorFquyA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772637677, "uuid": "787bfec9-6b59-4196-af20-d241f42ca5ec", "value": 55024, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6567e7ef-17de-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772637937, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772637937, "uuid": "c11d4633-6893-4815-a412-b801ab0b81a6", "comment": "Malware payload (Mirai)", "value": "bc795c1b1a180b0a0765e862e36e1825", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772637937, "uuid": "0dee9c66-726a-42db-ab19-f40c6550f452", "comment": "Malware payload (Mirai)", "value": "4e48cfbe0e06248397d3bf13c1c4d3e0c5428fa09de5e1016e2bd9609b4fd0eb", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772637937, "uuid": "313bafae-4946-4cf6-8eee-e5116bcca752", "value": "T152732B22F3B8173BC0B0B57480776A137EE95A9E0960EB8FBD750D9ADD132D416277", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772637937, "uuid": "ee0b83b9-9e9c-4921-a3e0-88ebb6b9f38a", "value": "1536:dtJKtT0rTgdlQQWTlAmMRlAsiyCvj1swUY8UTAJqU4XlAJfved1DsWxH3Yo48X:vItIrYQQW2riyCvj1swUY8UEJqB60dxJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772637937, "uuid": "347a2953-80ee-46a7-be64-fbf6952b1b87", "value": 77220, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772637937, "uuid": "11db3425-791f-4326-8953-b56b11f6774b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9d754a3-17de-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772638079, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772638079, "uuid": "4ddc2557-ba52-48cb-80a5-abaab3d3f9c8", "comment": "Malware payload (Mirai)", "value": "5e6b9f878a9b811a31096dc530654332", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772638079, "uuid": "1a27b27c-437a-4046-a0c7-f18f6ca55f32", "comment": "Malware payload (Mirai)", "value": "55da8e0c9e5ddccd0b17cfb9fe04867f5583e1f04d7db76960a8c3df060c0b04", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772638079, "uuid": "29d6d40a-8eef-46d3-ad16-34f72433753c", "value": "T1214302B210678940C9F296BD253B73410508F374358CCA6AAFDC2C58A82FF2B67797", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772638079, "uuid": "2900b611-0158-4893-a712-ea4383c963b1", "value": "1536:ssWkiKoqvshGpwwURz2URVG7aLI4nouy8tyssK:1W0FYSUK7aL7outBZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772638079, "uuid": "3a7deb52-3fae-4397-984e-bca066cc3071", "value": 58068, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772638079, "uuid": "9ec4e87a-b0f6-494f-acf6-7f256ee89933", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e81a1bf-171b-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772638274, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772638274, "uuid": "c5f26c12-c642-4b5e-ac82-698d89642167", "comment": "Malware payload", "value": "1c8447bb50959591b02bc2cfbb60fedf", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772638274, "uuid": "1519d80a-86a2-4811-b9b3-50fd509a353d", "comment": "Malware payload", "value": "3ea51354e8400a708ab3c6bbf2e80d73c81fc52a310306abe321ae6398093f1c", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772638274, "uuid": "c713f8d2-1d6c-46fe-bb5d-a198b9d92a85", "value": "T18607E69D290F9CE687EE6B8188B42F2C32757B217C13543BA2BC76978F113B45D42B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772638274, "uuid": "cb2b87f0-2f09-48ca-a0e9-af356995e047", "value": "49152:8UixbItdTrJoFVPMvXGIa6tPoat0tsgJReV1Y5PwJzNjXIV5PklblQlq63k8d5kr:7iBI/JoFdMPGe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772638274, "uuid": "4485ef3c-aec5-44bd-a7a4-b44e29978f44", "value": 17039525, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772638274, "uuid": "bc035b2d-ce1e-4ea4-847b-9e4ad150aedf", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772648298, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772648298, "uuid": "adf98ce5-421a-4033-b368-34676ef84b0f", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772648298, "uuid": "4c558bef-0f52-4a9a-8068-6f0b5777462e", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772648298, "uuid": "b5cbb43e-2c45-4bc7-9a1d-f4030bb66376", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772648298, "uuid": "d7fd0302-a389-4a82-b1be-935a7df7369f", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772648298, "uuid": "636b0ee1-90d2-4798-ad5c-6e72195f169b", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61a1588d-180d-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772658117, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772658117, "uuid": "eb7585dc-db64-4b9a-b289-49e360153d61", "comment": "Malware payload (Mirai)", "value": "592b12e36817f4a41f5cc98124e37b8c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772658117, "uuid": "11350b8f-c370-4850-b572-ae7a4af8f2d2", "comment": "Malware payload (Mirai)", "value": "d503553d798b7fb2fc8335c661cd2d37f1721549ffe2aea420d28e9944253b77", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772658117, "uuid": "9d79e812-dc9e-429d-bdde-f9a71ae9cecf", "value": "T19043F1D6ED2C6687C69CC330C8BEF60D5494701C92EEC1F73B4613AA689BF1A1C4C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772658117, "uuid": "a048a1dc-098d-46ef-99fb-afa3b62cce9b", "value": "1536:/n+QV3XCtaBGhn1m47YQ/ijDgVLEHtZTnouy8ty0:/+QV3XCfmwYQ/ifg5EfroutV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772658117, "uuid": "43633d31-2c3a-4017-b12e-c02015c3dafe", "value": 56180, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772658117, "uuid": "8187e799-996a-4918-bb17-8f0c5dec76dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2546b911-1810-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772659304, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772659304, "uuid": "9c6280bd-13f9-425c-af77-b8e2000ed302", "comment": "Malware payload (Mirai)", "value": "201db602dc4b2daac8106f9fec39811e", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772659304, "uuid": "417bafea-3cda-46fb-9a31-e27460e5239f", "comment": "Malware payload (Mirai)", "value": "6fcbaa277d7372b57d0cb8b983253822e89adebd43a674feddb4a10240bcb63b", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772659304, "uuid": "fb98e4f7-d276-4406-ac36-9a6a4d028d24", "value": "T1F6E202583E32A974CF72DE38EFBD445237478BB5E1DC353B0201E4A87181E0936765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772659304, "uuid": "c9c7ccb9-e51a-472c-beb0-dec3a1633c10", "value": "768:1+bJ1wV6/+GzCo6DCCbaxRHp8nmVOo+4s3Uoz0B:1eJ1wVQUo6jb8p8s8tzG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772659304, "uuid": "fbd2605c-cd2e-4e78-95c6-45bdfa675b07", "value": 31748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772659304, "uuid": "c038abc8-4588-4be1-bbcf-cdb2b9195c8a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772582599, "uuid": "8d819caa-175d-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.215.187:37950/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772582603, "uuid": "8f6f53df-175d-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.198.188:43050/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772582718, "uuid": "d472afd3-175d-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.93.218:56827/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772583195, "uuid": "f071a9f0-175e-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.120.113:55583/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772583552, "uuid": "c50be679-175f-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.237.16:40589/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772583619, "uuid": "ed1b9cd2-175f-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.93.218:56827/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772583624, "uuid": "f0830676-175f-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.7.223:59262/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772583860, "uuid": "7c9c97a2-1760-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.136.152.33:45752/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772584277, "uuid": "754e86f2-1761-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.215.187:37950/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772584581, "uuid": "2ab92094-1762-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.27.124:57369/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772584582, "uuid": "2b405fd4-1762-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.252.62:34814/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772584694, "uuid": "6e24718d-1762-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.7.223:59262/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772584758, "uuid": "942a77e2-1762-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.28.103.46:44351/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772585369, "uuid": "0036e9f2-1764-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.155.235:34754/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772585767, "uuid": "edc4a1b1-1764-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.21.121:43252/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772586319, "uuid": "3699eb82-1766-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.27.124:57369/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772586729, "uuid": "2aefb491-1767-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.252.62:34814/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772587158, "uuid": "2a9f9e59-1768-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.21.121:43252/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772587277, "uuid": "71cc1a4b-1768-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.246.127:57919/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772587278, "uuid": "72476b09-1768-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.61.19:59176/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772588663, "uuid": "abd5e568-176b-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.30.28:36745/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772588903, "uuid": "3a91421a-176c-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.61.19:59176/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772589082, "uuid": "a5bc3e00-176c-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.247.141:60173/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772589207, "uuid": "efc01736-176c-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.18.153:49905/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772589443, "uuid": "7cadeaa1-176d-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.193.115:60303/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772589503, "uuid": "a0323535-176d-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.28.65:59604/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772589561, "uuid": "c2d09668-176d-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.193.115:60303/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772590036, "uuid": "dddb3d16-176e-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.30.28:36745/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772590223, "uuid": "4d6529ad-176f-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.201.141:41256/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772590585, "uuid": "25572cd8-1770-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.94.112:36786/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772590638, "uuid": "450c8004-1770-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.158.68:50922/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772590763, "uuid": "8f4eda95-1770-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.18.153:49905/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772591184, "uuid": "8a92ae2a-1771-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.247.141:60173/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772591529, "uuid": "57ca44ec-1772-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.201.141:41256/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772591786, "uuid": "f11bf2d7-1772-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.94.112:36786/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772591839, "uuid": "10c5e1b4-1773-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.158.68:50922/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772592081, "uuid": "a0cb6ecd-1773-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.92.169:46780/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772592675, "uuid": "02ddeb3e-1775-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.94.84:58340/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772592847, "uuid": "69ba4c47-1775-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://crop-sync.croprotation.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772592856, "uuid": "6f128ded-1775-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.6.97:40498/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772593639, "uuid": "4164bf9c-1777-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.240.37:59893/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772593881, "uuid": "d1c0767d-1777-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.92.169:46780/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772594416, "uuid": "10cef84e-1779-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.94.84:58340/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772594416, "uuid": "10da8477-1779-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.6.97:40498/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772594536, "uuid": "5889dee1-1779-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.40.215:50454/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772594671, "uuid": "a90e8613-1779-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.102.83:53349/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772594785, "uuid": "ec73b196-1779-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.231.176:38023/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772594898, "uuid": "30451bd3-177a-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.115.240.54:50330/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772595319, "uuid": "2b35e720-177b-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.208.220:33456/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772595378, "uuid": "4e00aa7a-177b-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.40.215:50454/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772595438, "uuid": "721a8416-177b-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.240.37:59893/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772595846, "uuid": "6565be80-177c-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.31.201.20:58216/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772596627, "uuid": "36b7e420-177e-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.77.162:60763/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772597474, "uuid": "2f68517d-1780-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.242.135:53763/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772597597, "uuid": "788ad2ab-1780-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.31.201.20:58216/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772597887, "uuid": "259d806d-1781-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.24.175:49740/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772597948, "uuid": "4a1c8457-1781-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.102.83:53349/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772598014, "uuid": "710b9bc5-1781-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.50.219:48189/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772598127, "uuid": "b48a633e-1781-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://rot-node.croprotation.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772598374, "uuid": "47d92b7b-1782-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.226.134:55468/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772598912, "uuid": "886f006f-1783-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.24.175:49740/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772598917, "uuid": "8b70370e-1783-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.242.135:53763/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772599086, "uuid": "f0949d75-1783-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://crop-v2.croprotation.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772600370, "uuid": "edd6c7a3-1786-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.65.89:43557/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772601072, "uuid": "8ff7deb4-1788-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.51.169:44154/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772601137, "uuid": "b6c424c8-1788-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.9.237:58002/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772601191, "uuid": "d6fcee34-1788-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://rot04.croprotation.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772601310, "uuid": "1e0796d1-1789-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.5.140:40482/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772601497, "uuid": "8d3638ed-1789-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.173.41:35159/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772601800, "uuid": "41e36766-178a-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.82.169:44078/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772602640, "uuid": "36a948c9-178c-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.52.103/bins/parm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772602640, "uuid": "36a948cb-178c-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.52.103/bins/parm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772602640, "uuid": "36a95b53-178c-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.52.103/bins/parm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772602640, "uuid": "36a96863-178c-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.52.103/bins/px86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772602640, "uuid": "36a96d1f-178c-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.52.103/bins/pmips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772602640, "uuid": "36ab44a7-178c-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.161/bins/pm68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772602640, "uuid": "36ac9ec6-178c-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.161/bins/psh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772602640, "uuid": "36b20413-178c-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.52.103/bins/psh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772602640, "uuid": "36b2213d-178c-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.52.103/bins/pmpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772602690, "uuid": "5456a621-178c-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.52.103/bins/parm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772602869, "uuid": "bf082402-178c-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.149.177:52769/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772603048, "uuid": "29b9a866-178d-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://vec-core.suspendvector.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772603290, "uuid": "ba3ae7dc-178d-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.173.41:35159/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772603348, "uuid": "dcb333dd-178d-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.182.136:39473/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772603417, "uuid": "060448f6-178e-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.92.91:38252/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772603473, "uuid": "2734c453-178e-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.255.29.0:51553/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772603544, "uuid": "515c5aab-178e-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.135.3:54028/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772603946, "uuid": "411e1698-178f-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://susp-node.suspendvector.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772603958, "uuid": "4811e74f-178f-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.47.140:41794/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772604369, "uuid": "3cf0db85-1790-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.149.177:52769/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772604444, "uuid": "6a218bee-1790-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.230.3:34357/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772604545, "uuid": "a5d8da74-1790-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://workflow-rest-wars-cargo.trycloudflare.com/yguzspb.bat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772604545, "uuid": "a5f8c1a5-1790-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://workflow-rest-wars-cargo.trycloudflare.com/jibjtkn.wsh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772604545, "uuid": "a6017a44-1790-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://workflow-rest-wars-cargo.trycloudflare.com/file/Fac_2026_5784037900.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772604549, "uuid": "a865f3de-1790-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://workflow-rest-wars-cargo.trycloudflare.com/kgsltpy.js", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772604565, "uuid": "b246d54a-1790-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.sogou-shurufa.help/%E6%90%9C%E7%8B%97%E6%8B%BC%E9%9F%B3%E8%BE%93%E5%85%A5%E6%B3%95.exe", "Tag": [ { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772604607, "uuid": "cb44c513-1790-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://workflow-rest-wars-cargo.trycloudflare.com/tcjvzdz.wsh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772604608, "uuid": "cb612514-1790-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://workflow-rest-wars-cargo.trycloudflare.com/file/Fac_2026_1819465741.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772604608, "uuid": "cb612f6f-1790-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://workflow-rest-wars-cargo.trycloudflare.com/axqgcwj.bat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772604608, "uuid": "cb6e2359-1790-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://workflow-rest-wars-cargo.trycloudflare.com/dwgyuyb.js", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772604608, "uuid": "cb6e42b9-1790-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://workflow-rest-wars-cargo.trycloudflare.com/ab/a.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772604612, "uuid": "cde0702a-1790-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://mgtms.cc/force/Printer_Driver_SSL_support_v43.22.209.99.exe", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772604613, "uuid": "ce8028b4-1790-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.176.237/100/img_043611.png", "Tag": [ { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772604614, "uuid": "cefa6b37-1790-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://mgtms.cc/force/Win_Driver_SSL_support_v43.22.209.44.exe", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772604622, "uuid": "d3e5ff99-1790-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7309295924/tNRQGUL.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772604670, "uuid": "f09e8191-1790-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://dmaii.co/sys.vbs", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772604673, "uuid": "f267462b-1790-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.107.131:58105/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772604728, "uuid": "130a82f3-1791-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://mobshah.com/kbIkdoe.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772605338, "uuid": "7eabeb3e-1792-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.135.3:54028/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772605626, "uuid": "2a3fed1d-1793-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://vec-v1.suspendvector.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772606236, "uuid": "9639bf90-1794-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.121.97:35311/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772607010, "uuid": "632fc1ff-1796-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://susp03.suspendvector.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772607010, "uuid": "63626ef7-1796-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://2v42nbtg.deliainaturner.digital/?=check&&actmn=eArRcvNuXJTUtqlD", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772607021, "uuid": "69eb0ad7-1796-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.26.106:48284/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772607027, "uuid": "6d6bbe65-1796-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.1.187:38848/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772607075, "uuid": "8a1a3418-1796-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.47.140:41794/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772607790, "uuid": "3400c3ac-1798-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.199.240:43076/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772607979, "uuid": "a4ebd890-1798-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.121.97:35311/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772607979, "uuid": "a4f82a0a-1798-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.9.237:58002/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772608028, "uuid": "c233bc90-1798-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://cal-node.caliphdotham.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772608159, "uuid": "1056ee13-1799-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.141.13:37712/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772608280, "uuid": "58191b4b-1799-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.173.142:41881/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772608519, "uuid": "e6839412-1799-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.34:51769/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772608931, "uuid": "dc34da28-179a-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.173.142:41881/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772608998, "uuid": "0487be51-179b-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.93.113:38434/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772608999, "uuid": "04b616eb-179b-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.220.251.52:60622/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772609124, "uuid": "4f3efe70-179b-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.199.240:43076/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772609348, "uuid": "d4ac9198-179b-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://olf4rjbg.hardmosolenog.digital/?=check&&actmn=lGGFeAqvjwlIvOuz", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772609591, "uuid": "65fb7628-179c-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://doth-sync.caliphdotham.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772609660, "uuid": "8eb9113a-179c-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.147.8:33231/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772609777, "uuid": "d4db2d3f-179c-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.141.13:37712/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772609895, "uuid": "1aad201f-179d-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.116.78:58332/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772610082, "uuid": "8a945913-179d-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.5.122:50281/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772610209, "uuid": "d62494d0-179d-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.248.127:55376/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772610331, "uuid": "1e95c0fe-179e-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.93.113:38434/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772610615, "uuid": "c83212cf-179e-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.127.150:36951/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772610616, "uuid": "c8f71e01-179e-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.190.209:39253/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772610744, "uuid": "150a4c8e-179f-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.53.189:44858/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772610744, "uuid": "15109304-179f-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.47.93:53394/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772610786, "uuid": "2e5106ee-179f-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://cal-v1.caliphdotham.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772611225, "uuid": "33c07d42-17a0-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://24.95.54.96:53846/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772611271, "uuid": "4f5d66c3-17a0-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.233.101:39213/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772611709, "uuid": "543211c2-17a1-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.116.78:58332/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772611880, "uuid": "ba1bc991-17a1-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.128.29:42992/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772612060, "uuid": "2556dfac-17a2-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://24.95.54.96:53846/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772612409, "uuid": "f5821347-17a2-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://doth09.caliphdotham.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772612478, "uuid": "1e836c29-17a3-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.78.209.238:52467/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772612533, "uuid": "3f167309-17a3-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.128.29:42992/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772612773, "uuid": "ce449b4a-17a3-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.233.101:39213/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772613074, "uuid": "818747c1-17a4-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.238.104:36209/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772613794, "uuid": "2edd0bdb-17a6-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.235.2:49633/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772613863, "uuid": "58163d48-17a6-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.238.104:36209/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772614281, "uuid": "510c6b40-17a7-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.246.85.231:60211/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772614464, "uuid": "be880c89-17a7-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.144.34:34616/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772614698, "uuid": "499d7a52-17a8-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.228.210:35461/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772615423, "uuid": "f9d3b646-17a9-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.235.2:49633/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772615424, "uuid": "fa5a639f-17a9-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.14.18:58766/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772615480, "uuid": "1be160c4-17aa-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.144.34:34616/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772615827, "uuid": "ea748d47-17aa-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.97:5553/jesses.bin", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772616194, "uuid": "c58af58e-17ab-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.176.237/img/a/optimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772616564, "uuid": "a219416b-17ac-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.86.113:43694/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772617041, "uuid": "be6e5c45-17ad-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.233.168:39151/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772617041, "uuid": "be718cda-17ad-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.14.18:58766/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772617047, "uuid": "c1b07917-17ad-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.64.184.26:36853/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772617098, "uuid": "e0773058-17ad-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.186.230.140:34746/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772617338, "uuid": "6f28cb27-17ae-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.254.151:57964/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772617572, "uuid": "fab86742-17ae-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.112.189.134:33767/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772617878, "uuid": "b1522147-17af-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.254.151:57964/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772618358, "uuid": "cf3148d9-17b0-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.152.190:60882/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772618630, "uuid": "718e3655-17b1-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.233.168:39151/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772618897, "uuid": "106950c3-17b2-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.64.184.26:36853/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772618954, "uuid": "3274d2e0-17b2-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.235.249:44454/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772619018, "uuid": "58eb9e87-17b2-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.95.229:56484/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772619376, "uuid": "2e0fec3b-17b3-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.213.162:55651/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772619738, "uuid": "061ad986-17b4-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.32.175:38579/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772620003, "uuid": "a3eb7454-17b4-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.152.190:60882/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772620003, "uuid": "a3ec3753-17b4-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.221.182:59552/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772620208, "uuid": "1de7b997-17b5-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.67.197:57921/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772620400, "uuid": "90a80101-17b5-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.95.229:56484/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772620454, "uuid": "b0ea6545-17b5-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.150.171:33462/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772620756, "uuid": "64de5fdc-17b6-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.86.113:43694/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772620948, "uuid": "d6d48c0b-17b6-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.246.114.6:47441/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772621228, "uuid": "7df81d3e-17b7-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.173.143.33/Pere61.mdp", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772621228, "uuid": "7dfdc4f0-17b7-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.173.143.33/Ddssyn.aaf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772621228, "uuid": "7e1081f3-17b7-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.173.143.33/Terri.toc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772621228, "uuid": "7e1bdd0f-17b7-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.173.143.33/fjHErtLKrBY141.bin", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772621228, "uuid": "7e1bdf6f-17b7-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.173.143.33/hqXZLTGggIEIDqTl65.bin", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772621228, "uuid": "7e2c38cb-17b7-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://yandex-app.ru/download", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "mamont", "colour": "#499b9b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772621240, "uuid": "8501bc62-17b7-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.173.143.33:8001/Printerm.psd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772621288, "uuid": "a19b24e1-17b7-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.112.100:37312/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772621475, "uuid": "10e6bd3c-17b8-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.112.189.134:33767/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772621709, "uuid": "9caa88fc-17b8-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.67.197:57921/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772622679, "uuid": "def1b0a9-17ba-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.155.110:35010/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772623032, "uuid": "b10671a3-17bb-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.68.198.66:37248/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772623330, "uuid": "62d371df-17bc-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.234.207.163:45065/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772623330, "uuid": "62d58f26-17bc-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://alamintelecom.xyz/public/AlaminTelecomV1.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772623336, "uuid": "66abc1e0-17bc-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://168-1393918816.cos.ap-tokyo.myqcloud.com/%E3%83%87%E3%83%BC%E3%82%BF%E3%83%AC%E3%83%9D%E3%83%BC%E3%83%88.rar", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772623387, "uuid": "84fade9e-17bc-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://apk.tcpateiu.com/app_sub/pkg/Tcpatel-tcpateiu-release-2.0.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772623390, "uuid": "86597a35-17bc-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-c62500800d9244beabd2934a10b4770b.r2.dev/ScreenConnect.ClientSetup.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772623392, "uuid": "879193e0-17bc-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://imagefiles-backup.oss-ap-southeast-7.aliyuncs.com/ti/dajoke2.exe", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772623403, "uuid": "8e578b93-17bc-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://dowoxox.gfewr.com/B9.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772623406, "uuid": "905d92dc-17bc-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://download.pplive.com/PPTV(pplive)_forap_1084_9993.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772623445, "uuid": "a7596915-17bc-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://fullbet138.games/aplikasi/Fullbet138.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772623445, "uuid": "a76e8d83-17bc-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://spacemanslot88.games/aplikasi/spacemanslot88.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772623446, "uuid": "a8257c1a-17bc-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://csplay168.games/aplikasi/Csplay138.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772623758, "uuid": "61ea734a-17bd-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.112.100:37312/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772624179, "uuid": "5d094808-17be-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.155.110:35010/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772624237, "uuid": "7faf08a3-17be-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.230.219:38242/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772624287, "uuid": "9d2e1d1d-17be-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://35.231.116.180/payload.ps1", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772624839, "uuid": "e689accf-17bf-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.52.103/bins/pm68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772624890, "uuid": "04bcce03-17c0-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.191.37:60403/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772625132, "uuid": "952d24e8-17c0-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.234.207.163:45065/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772625491, "uuid": "6b2f5a41-17c1-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.230.219:38242/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772625797, "uuid": "217a1f50-17c2-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.102.232:58590/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772626273, "uuid": "3cd6f809-17c3-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.191.37:60403/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772626390, "uuid": "82e99e54-17c3-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.235.195:46312/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772626399, "uuid": "885729aa-17c3-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.68.198.66:37248/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772627167, "uuid": "52171391-17c5-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/evilgrou-tech/drive/refs/heads/main/forex.ps1", "Tag": [ { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772627167, "uuid": "521bdf96-17c5-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/evilgrou-tech/drive/refs/heads/main/PZ-Reversals.ps1", "Tag": [ { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772627168, "uuid": "523cc541-17c5-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/evilgrou-tech/drive/refs/heads/main/launcher.bat", "Tag": [ { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772627184, "uuid": "5c119230-17c5-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://orayz.com/AweSun_16.0.0.22931_x64_patched.exe", "Tag": [ { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772627212, "uuid": "6cbda1bf-17c5-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://oraypc.com.cn/sun_oray_x64.zip", "Tag": [ { "name": "Generic", "colour": "#0dc42f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772627228, "uuid": "7638c4b8-17c5-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://8a2yizw9.earedteach.digital/?=check&&actmn=fZIdZqFSKZzjbFrx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772627712, "uuid": "96dc5f8c-17c6-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.107.131:58105/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772628437, "uuid": "46f1b04e-17c8-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.39.19.233:42266/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772628672, "uuid": "d2e8a691-17c8-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.152.214:47599/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772628849, "uuid": "3c6474e4-17c9-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.34.104:56032/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772629032, "uuid": "a94c489b-17c9-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.176.178:35093/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772629649, "uuid": "190cd379-17cb-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.34.104:56032/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772629998, "uuid": "e960828b-17cb-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.247.75:37396/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772630121, "uuid": "32ae3f66-17cc-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.152.214:47599/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772630237, "uuid": "77a7183b-17cc-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.214.56.173:60672/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772630539, "uuid": "2bbb0d62-17cd-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.176.178:35093/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772630768, "uuid": "b4822dfa-17cd-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://blue-node.bluehaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772630776, "uuid": "b9035086-17cd-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.177.233:60786/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772630848, "uuid": "e42174be-17cd-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.62.67:34258/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772631010, "uuid": "44c60d63-17ce-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.91.69:58869/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772631188, "uuid": "ae56f63e-17ce-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://haven-v1.bluehaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772631259, "uuid": "d8e2b9e7-17ce-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.20.111:59185/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772631368, "uuid": "1994c56f-17cf-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://sky-sync.bluehaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772631563, "uuid": "8e5d331d-17cf-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.247.75:37396/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772631808, "uuid": "2020fba7-17d0-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://blue03.bluehaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772632342, "uuid": "5e21748e-17d1-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.20/x86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772632627, "uuid": "086f26d7-17d2-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://gold-hub.goldhaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772632700, "uuid": "33b68df7-17d2-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.69.149:52010/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772632933, "uuid": "be7d1d6c-17d2-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://haven-v2.goldhaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772633064, "uuid": "0ce75365-17d3-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.100.152:42220/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772633287, "uuid": "91bfb87c-17d3-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://aurum-net.goldhaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772633422, "uuid": "e1dd2dc0-17d3-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.71.49.85:59569/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772633735, "uuid": "9cd5cb12-17d4-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.183.100:55290/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772633790, "uuid": "bd5a4717-17d4-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.166.74:59187/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772633828, "uuid": "d3e96daa-17d4-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://gold07.goldhaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772634151, "uuid": "9460570b-17d5-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.69.149:52010/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772634629, "uuid": "b1df8454-17d6-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.213.162:55651/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772635171, "uuid": "f49f275b-17d7-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.206.86:46027/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772635289, "uuid": "3abd8a37-17d8-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.71.49.85:59569/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772635509, "uuid": "be13e8ec-17d8-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://dark-core.darkhaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772635689, "uuid": "2996adad-17d9-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://haven-x.darkhaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772635870, "uuid": "951d21ea-17d9-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://void-sync.darkhaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772635885, "uuid": "9e28693d-17d9-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.130.207.72:36079/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772636468, "uuid": "f9e965ca-17da-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://dark01.darkhaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772636649, "uuid": "659dda00-17db-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://stone-base.stonehaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772636672, "uuid": "736375f0-17db-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.175.236:51265/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772636888, "uuid": "f44ae93a-17db-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://haven-v3.stonehaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772637248, "uuid": "cae99443-17dc-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://rock-net.stonehaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772637556, "uuid": "8270771c-17dd-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.226.172.120:56655/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772637734, "uuid": "ec2aa19d-17dd-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.91.177:53395/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772637789, "uuid": "0cff1a04-17de-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://stone04.stonehaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772637810, "uuid": "19c7163b-17de-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.180.172.112:54605/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772638120, "uuid": "d2ac5656-17de-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.48.157.101:42036/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772638267, "uuid": "2a1d39de-17df-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://goldenangel.wuaze.com/img_064700.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772638272, "uuid": "2ce961b9-17df-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://angelbridtechnologyltd.kesug.com/img_163302.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772638274, "uuid": "2e5c4065-17df-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.176.237/img/optimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772638332, "uuid": "50785dfa-17df-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://wind-unit.windhaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772638392, "uuid": "74869cee-17df-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.48.157.101:42036/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772638508, "uuid": "b999c977-17df-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://haven-v4.windhaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772638514, "uuid": "bd772ab6-17df-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.226.172.120:56655/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772638579, "uuid": "e4201826-17df-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.201.84:45207/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772638703, "uuid": "2db54609-17e0-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.180.172.112:54605/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772638927, "uuid": "b32e4b73-17e0-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://air-flow.windhaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772639228, "uuid": "66ffd7b1-17e1-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://wind02.windhaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772639587, "uuid": "3c9ed86b-17e2-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://lake-site.lakehaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772639712, "uuid": "8717cfcf-17e2-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.100.47:43244/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772639947, "uuid": "137c4842-17e3-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://haven-v5.lakehaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772639958, "uuid": "1a1e8555-17e3-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.220.251.52:60622/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772640488, "uuid": "558a126f-17e4-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://aqua-sync.lakehaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772640668, "uuid": "c0d3cfa2-17e4-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.201.84:45207/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772640909, "uuid": "5092c358-17e5-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://lake09.lakehaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772641146, "uuid": "ddf18546-17e5-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://oak-path.oakshaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772641275, "uuid": "2b206a94-17e6-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.100.47:43244/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772641337, "uuid": "4fef583c-17e6-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.147.188:51001/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772641867, "uuid": "8bca74d5-17e7-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://haven-v6.oakshaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772642053, "uuid": "fae3ed52-17e7-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.70.13.127:55773/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772642287, "uuid": "85e50278-17e8-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://wood-net.oakshaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772642434, "uuid": "dd80892b-17e8-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.60.170:59583/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772642587, "uuid": "38fb7a2a-17e9-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://oak05.oakshaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772642720, "uuid": "8848c5fe-17e9-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.231.119:49219/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772642833, "uuid": "cb754c0f-17e9-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.86.87:38234/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772642887, "uuid": "ebe31cfb-17e9-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://iron-vault.ironhaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772642962, "uuid": "183c4291-17ea-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.60.170:59583/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772642962, "uuid": "1855e778-17ea-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.147.188:51001/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772643309, "uuid": "e7902826-17ea-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://haven-v7.ironhaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772643550, "uuid": "7720a389-17eb-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.52.120:44960/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772643609, "uuid": "9a2726b0-17eb-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://metal-sync.ironhaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772643679, "uuid": "c3f463cc-17eb-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.70.13.127:55773/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772643914, "uuid": "4fed0756-17ec-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.231.119:49219/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772643971, "uuid": "719654c2-17ec-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://iron08.ironhaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772644268, "uuid": "22daf074-17ed-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://star-gate.starhaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772644569, "uuid": "d675ec36-17ed-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://haven-v8.starhaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772644883, "uuid": "9144adcf-17ee-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.5.140:40482/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772644927, "uuid": "abeff670-17ee-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://astro-net.starhaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772644993, "uuid": "d331203b-17ee-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.88.208:51531/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772645239, "uuid": "65668853-17ef-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://star06.starhaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772645240, "uuid": "6606f225-17ef-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.203.237.218:48418/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772645588, "uuid": "359aefad-17f0-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://wolf-run.wolfhaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772645712, "uuid": "7f68da61-17f0-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.166:33808/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772645954, "uuid": "100efe86-17f1-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.203.237.218:48418/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772646008, "uuid": "303b9927-17f1-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://haven-v9.wolfhaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772646366, "uuid": "054548aa-17f2-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://wild-sync.wolfhaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772646727, "uuid": "dccda715-17f2-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://wolf01.wolfhaven.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772646798, "uuid": "06e72851-17f3-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.217.94:40339/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772646923, "uuid": "51a21003-17f3-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.108.107:58918/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772646970, "uuid": "6da5b38c-17f3-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.166:33808/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772647029, "uuid": "9074eb2a-17f3-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://multi-node.multilsacred.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772647268, "uuid": "1f1c317c-17f4-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://sacred-v1.multilsacred.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772647347, "uuid": "4e4c90d8-17f4-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.108.107:58918/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772647640, "uuid": "fd0679cf-17f4-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.187.86:52530/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772648049, "uuid": "f0aefc61-17f5-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://multi03.multilsacred.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772648118, "uuid": "19c8fb8c-17f6-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.217.94:40339/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772648299, "uuid": "8553d460-17f6-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.13.185:50129/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772648409, "uuid": "c7177eca-17f6-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://sync-base.multilsacred.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772649131, "uuid": "75335a5f-17f8-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.187.86:52530/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772649249, "uuid": "bb88735f-17f8-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://long-site.longtime.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772649675, "uuid": "b9ae70e7-17f9-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.13.185:50129/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772649846, "uuid": "1f9828f9-17fa-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://time-v2.longtime.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772650567, "uuid": "cd3d65f2-17fb-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://chrono07.longtime.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772650567, "uuid": "cda641a5-17fb-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://openclaw.official-version.com/openclaw", "Tag": [ { "name": ".net", "colour": "#b405c4", "exportable": true, "hide_tag": false }, { "name": "mshta", "colour": "#787444", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772650698, "uuid": "1b677465-17fc-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.107.93.187:42420/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772650938, "uuid": "aa59bfc2-17fc-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.66.198:54237/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772651108, "uuid": "0f8ac621-17fd-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://long-run.longtime.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772651171, "uuid": "352bff26-17fd-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.1.187:38848/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772651826, "uuid": "bbe62733-17fe-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://past-core.pastorsorny.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772652073, "uuid": "4f37a759-17ff-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.87.23:51630/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772652203, "uuid": "9c712672-17ff-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.190.246:36861/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772653147, "uuid": "cf72f64b-1801-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://sorny-v3.pastorsorny.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772653514, "uuid": "a9a06313-1802-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://past01.pastorsorny.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772653828, "uuid": "65458589-1803-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.230.77:42714/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772654001, "uuid": "cc50fdfc-1803-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.100.99:44265/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772654287, "uuid": "76cbe7ad-1804-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://phys-unit.dysenteryphysics.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772654483, "uuid": "ebad80a0-1804-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.44/hiddenbin/boatnet.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772654483, "uuid": "ebadbd8a-1804-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.44/hiddenbin/boatnet.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772654483, "uuid": "ebb0533b-1804-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.44/hiddenbin/boatnet.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772654483, "uuid": "ebb25f0d-1804-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.44/hiddenbin/boatnet.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772654483, "uuid": "ebb265b4-1804-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.44/hiddenbin/boatnet.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772654483, "uuid": "ebb27c60-1804-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.44/hiddenbin/boatnet.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772654483, "uuid": "ebb56614-1804-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.44/hiddenbin/boatnet.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772654483, "uuid": "ebb56835-1804-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.44/hiddenbin/boatnet.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772654483, "uuid": "ebba64cd-1804-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.44/hiddenbin/boatnet.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772654538, "uuid": "0c63c0a0-1805-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.44/hiddenbin/boatnet.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772654538, "uuid": "0c641af8-1805-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.44/hiddenbin/boatnet.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772654538, "uuid": "0c723a2a-1805-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.44/hiddenbin/boatnet.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772654782, "uuid": "9d7b8f60-1805-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.100.99:44265/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772654902, "uuid": "e4fa8830-1805-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.230.77:42714/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772654946, "uuid": "ffaa54ec-1805-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://dys-v4.dysenteryphysics.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772655200, "uuid": "96926a31-1806-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.16.57:57187/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772655550, "uuid": "678947c5-1807-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://physics09.dysenteryphysics.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772655864, "uuid": "229984be-1808-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.163.91.73:43909/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772656344, "uuid": "40c3ee9b-1809-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.255.29.8:42416/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772656446, "uuid": "7dcbed70-1809-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.73.110:49036/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772656702, "uuid": "15dd6aa2-180a-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.1.20:34752/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772656747, "uuid": "3110fbb8-180a-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://phys-sync.dysenteryphysics.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772656757, "uuid": "36ae917e-180a-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.195.62:37185/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772656939, "uuid": "a33d0a07-180a-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.235.195:46312/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772657003, "uuid": "c9bb0717-180a-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.224.37:45390/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772657047, "uuid": "e3d1cca1-180a-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://plat-gate.platypusout.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772657066, "uuid": "ef57662c-180a-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.63.168:53303/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772657184, "uuid": "358fc3f5-180b-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.88.208:51531/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772657409, "uuid": "bb4ce154-180b-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://out-v5.platypusout.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772657893, "uuid": "dc4af341-180c-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.255.29.8:42416/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772658017, "uuid": "2611dff9-180d-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.10.84:41839/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772658068, "uuid": "447908b7-180d-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://plat04.platypusout.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772658080, "uuid": "4b938419-180d-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.63.168:53303/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772658336, "uuid": "e416abfc-180d-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.155.235:34754/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772658430, "uuid": "1c02e732-180e-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://out-flow.platypusout.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772658559, "uuid": "68c5d486-180e-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.47.43:34354/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772658799, "uuid": "f84459a4-180e-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.145.69:60515/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772658910, "uuid": "3a35604b-180f-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://atroph-hub.atrophlearn.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772658970, "uuid": "5db346a8-180f-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.1.20:34752/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772659546, "uuid": "b50e96c1-1810-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.241.136.21:38439/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772659759, "uuid": "344217f0-1811-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.10.84:41839/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772660119, "uuid": "0ad2b876-1812-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.145.69:60515/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772660480, "uuid": "e1f6095f-1812-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.47.43:34354/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772661214, "uuid": "975b0722-1814-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.76.85:40337/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772661682, "uuid": "ae6bcd7c-1815-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.183.4:51031/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772661921, "uuid": "3ca09746-1816-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.145.202:34281/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772662999, "uuid": "bfa3d5b2-1818-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.183.4:51031/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772663000, "uuid": "bfba5987-1818-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.124.245:48931/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772663602, "uuid": "2697d43a-181a-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.145.202:34281/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772663780, "uuid": "90bed521-181a-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.246.114.6:47441/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772664021, "uuid": "207c603d-181b-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.101.252:42741/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772664202, "uuid": "8c5b65a0-181b-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.124.245:48931/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772664271, "uuid": "b5c8c52a-181b-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.252.107:50702/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772665273, "uuid": "0aeeb515-181e-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.101.252:42741/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772665878, "uuid": "7355b081-181f-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.252.107:50702/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772666000, "uuid": "bc06d769-181f-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.91.177:53395/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772666479, "uuid": "d9bcce83-1820-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.238.92:49422/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772666662, "uuid": "4685ba87-1821-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.109.59:36552/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772667618, "uuid": "80799539-1823-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.215.152:50771/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772667680, "uuid": "a5c298e8-1823-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.99.172:46151/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772668040, "uuid": "7c1dfaa1-1824-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.230.229.205:56570/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772668699, "uuid": "04c211e6-1826-11f1-8e4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.112.85:50886/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772621225, "uuid": "7bf21405-17b7-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.173.143.33", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772614264, "uuid": "4720ba6b-17a7-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.246.85.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772646906, "uuid": "4771a320-17f3-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.108.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772655185, "uuid": "8e35854a-1806-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.16.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772635146, "uuid": "e5bad2b6-17d7-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.38.206.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772642405, "uuid": "ccbb84d1-17e8-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.242.60.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772620925, "uuid": "c983436d-17b6-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.246.114.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772664245, "uuid": "a5f80205-181b-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.252.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772662986, "uuid": "b789d372-1818-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.231.124.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772602865, "uuid": "bcb9b809-178c-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.149.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772601065, "uuid": "8bf1acc7-1788-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.51.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772638566, "uuid": "dbf30821-17df-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.201.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772667666, "uuid": "9ce223ba-1823-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.99.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772633766, "uuid": "af7264ad-17d4-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.166.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772589424, "uuid": "718946f5-176d-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.193.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772653807, "uuid": "585501de-1803-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.230.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772626385, "uuid": "7faa22a7-17c3-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.235.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772617325, "uuid": "67619186-17ae-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.254.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772590565, "uuid": "195af591-1770-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.94.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772606225, "uuid": "8f3896fb-1794-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.121.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772603944, "uuid": "402fb633-178f-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.47.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772590625, "uuid": "3d1a1d94-1770-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.158.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772656685, "uuid": "0bc1a00b-180a-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.1.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772603526, "uuid": "46a0060c-178e-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.135.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772648285, "uuid": "7d593140-17f6-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.13.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772600345, "uuid": "deede6a6-1786-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.65.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772661906, "uuid": "33d3701f-1816-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.145.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772661665, "uuid": "a4359479-1815-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.183.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772598006, "uuid": "6c6d7978-1781-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.50.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772630826, "uuid": "d6a0a4e9-17cd-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.117.62.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772655848, "uuid": "18d03d88-1808-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.163.91.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772607786, "uuid": "31acd42e-1798-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.199.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772594766, "uuid": "e13fbfaa-1779-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.231.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772622666, "uuid": "d6ebd22e-17ba-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.129.155.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772635866, "uuid": "92da4cc6-17d9-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.130.207.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772623326, "uuid": "609708a1-17bc-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.234.207.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772628845, "uuid": "39d54c8a-17c9-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.34.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772668025, "uuid": "734bdc87-1824-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.230.229.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772668685, "uuid": "fcc42220-1825-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.112.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772592065, "uuid": "97b7ba46-1773-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.92.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772594647, "uuid": "9a9be855-1779-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.102.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772601306, "uuid": "1ba46d36-1789-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.5.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772624225, "uuid": "781dfacc-17be-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.230.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772623328, "uuid": "61bacabf-17bc-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "168-1393918816.cos.ap-tokyo.myqcloud.com" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772585344, "uuid": "f190d2a5-1763-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.155.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772632325, "uuid": "54556eae-17d1-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772619365, "uuid": "27901082-17b3-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.213.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772637727, "uuid": "e86dab58-17dd-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.91.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772590206, "uuid": "432b2c58-176f-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.201.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772592845, "uuid": "6837bae9-1775-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.6.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772610606, "uuid": "c27fafe8-179e-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.190.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772584566, "uuid": "21cb2f76-1762-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.252.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772594886, "uuid": "28ae5b41-177a-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.115.240.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772595306, "uuid": "238b1545-177b-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.208.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772637787, "uuid": "0bba0ce2-17de-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.180.172.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772659507, "uuid": "9e50307a-1810-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.241.136.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772650684, "uuid": "1353b5b1-17fc-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.107.93.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772633406, "uuid": "d8e8a7a7-17d3-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.71.49.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772647626, "uuid": "f4654043-17f4-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.154.187.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772611864, "uuid": "b0c17294-17a1-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.128.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772608266, "uuid": "4fbfeac0-1799-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.173.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772587266, "uuid": "6abe6c53-1768-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.61.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772623026, "uuid": "ad945bf2-17bb-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.68.198.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772615407, "uuid": "f08c24d8-17a9-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.14.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772608145, "uuid": "079babf6-1799-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.141.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772645237, "uuid": "6448be7b-17ef-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.203.237.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772658785, "uuid": "ef7591e4-180e-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.145.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772628666, "uuid": "cf890bb7-17c8-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.152.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772597884, "uuid": "23c24ebd-1781-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.24.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772603344, "uuid": "da6074df-178d-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.182.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772618945, "uuid": "2d306c0e-17b2-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.235.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772617564, "uuid": "f63d2c32-17ae-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.112.189.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772611207, "uuid": "28fb115d-17a0-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "24.95.54.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772661184, "uuid": "85c6f02d-1814-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.76.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772608985, "uuid": "fc893588-179a-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.220.251.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772642707, "uuid": "809156a7-17e9-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.231.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772657045, "uuid": "e2984a3b-180a-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.63.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772607008, "uuid": "61f9be7b-1796-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "2v42nbtg.deliainaturner.digital" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772624285, "uuid": "9bf11e46-17be-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "35.231.116.180", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772617025, "uuid": "b4d3fd96-17ad-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.64.184.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772614685, "uuid": "41e395e4-17a8-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.70.228.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772638111, "uuid": "ccbc608e-17de-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.48.157.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772612466, "uuid": "174a6671-17a3-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.78.209.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772589065, "uuid": "9b4f2039-176c-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.74.247.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772618335, "uuid": "c155189e-17b0-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.81.152.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772614444, "uuid": "b24ba72d-17a7-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.90.144.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772610185, "uuid": "c7d89595-179d-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.248.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772629026, "uuid": "a5ef9675-17c9-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.176.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772613065, "uuid": "7c5d3bd1-17a4-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.238.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772629986, "uuid": "e20739cd-17cb-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.247.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772582585, "uuid": "850b8132-175d-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.215.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772658543, "uuid": "5fadec98-180e-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.47.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772639706, "uuid": "83905bc5-17e2-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.100.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772656984, "uuid": "be48183d-180a-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.224.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772666465, "uuid": "d13823cc-1820-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.238.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772620446, "uuid": "ab9bc6ef-17b5-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.150.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772583605, "uuid": "e4cc27db-175f-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.7.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772616545, "uuid": "96b6f058-17ac-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.86.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772624885, "uuid": "01916c64-17c0-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.191.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772593625, "uuid": "392c822a-1777-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.240.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772636647, "uuid": "642537de-17db-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.92.175.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772633705, "uuid": "8b077295-17d4-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.183.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772652185, "uuid": "920b9723-17ff-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.176.190.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772625785, "uuid": "19f15c55-17c2-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.102.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772607007, "uuid": "61c367a5-1796-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.1.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772592665, "uuid": "fd4316e4-1774-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.94.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772646785, "uuid": "ff023138-17f2-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.54.217.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772627225, "uuid": "74b5941e-17c5-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "8a2yizw9.earedteach.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772638925, "uuid": "b22fd7b0-17e0-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "air-flow.windhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772623327, "uuid": "60d13f92-17bc-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "alamintelecom.xyz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772638271, "uuid": "2c7764ff-17df-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "angelbridtechnologyltd.kesug.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772623385, "uuid": "83c7fc42-17bc-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "apk.tcpateiu.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772640486, "uuid": "54a298fb-17e4-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "aqua-sync.lakehaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772644925, "uuid": "aab5283a-17ee-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "astro-net.starhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772658907, "uuid": "3854f4c4-180f-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "atroph-hub.atrophlearn.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772633285, "uuid": "90674589-17d3-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "aurum-net.goldhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772630766, "uuid": "b33d6956-17cd-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "blue-node.bluehaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772631786, "uuid": "12f93509-17d0-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "blue03.bluehaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772608026, "uuid": "c141ca4d-1798-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "cal-node.caliphdotham.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772610785, "uuid": "2d4117d7-179f-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "cal-v1.caliphdotham.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772650565, "uuid": "cc3b428f-17fb-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "chrono07.longtime.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772592845, "uuid": "684f674e-1775-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "crop-sync.croprotation.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772599085, "uuid": "ef9c9388-1783-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "crop-v2.croprotation.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772623385, "uuid": "83d9c8fa-17bc-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "csplay168.games" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772635507, "uuid": "bcf50fa7-17d8-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "dark-core.darkhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772636467, "uuid": "f8fea1f8-17da-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "dark01.darkhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772604665, "uuid": "edba70cf-1790-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "dmaii.co" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772609586, "uuid": "62f392c7-179c-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "doth-sync.caliphdotham.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772612407, "uuid": "f4176d58-17a2-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "doth09.caliphdotham.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772623395, "uuid": "89d15fe6-17bc-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "download.pplive.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772623386, "uuid": "847b5963-17bc-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "dowoxox.gfewr.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772654945, "uuid": "fec5a9c4-1805-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "dys-v4.dysenteryphysics.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772623385, "uuid": "83d3d037-17bc-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "fullbet138.games" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772632625, "uuid": "0717ab30-17d2-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "gold-hub.goldhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772633825, "uuid": "d24bc7b4-17d4-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "gold07.goldhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772631186, "uuid": "ad203de3-17ce-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "haven-v1.bluehaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772632930, "uuid": "bd2b8e8a-17d2-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "haven-v2.goldhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772636887, "uuid": "f341ce9c-17db-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "haven-v3.stonehaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772638506, "uuid": "b8832e02-17df-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "haven-v4.windhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772639946, "uuid": "12899761-17e3-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "haven-v5.lakehaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772641865, "uuid": "8acb420f-17e7-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "haven-v6.oakshaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772643307, "uuid": "e605d397-17ea-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "haven-v7.ironhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772644567, "uuid": "d54f78de-17ed-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "haven-v8.starhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772646007, "uuid": "2f359290-17f1-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "haven-v9.wolfhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772635686, "uuid": "279aa477-17d9-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "haven-x.darkhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772623386, "uuid": "83f0c62d-17bc-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "imagefiles-backup.oss-ap-southeast-7.aliyuncs.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772642885, "uuid": "eaad4895-17e9-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "iron-vault.ironhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772643967, "uuid": "6f573926-17ec-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "iron08.ironhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772639585, "uuid": "3bc07144-17e2-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "lake-site.lakehaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772640906, "uuid": "4f28e8c3-17e5-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "lake09.lakehaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772651106, "uuid": "0e8180bd-17fd-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "long-run.longtime.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772649244, "uuid": "b90221fc-17f8-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "long-site.longtime.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772643607, "uuid": "98b86dbd-17eb-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "metal-sync.ironhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772647025, "uuid": "8e60cb16-17f3-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "multi-node.multilsacred.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772648048, "uuid": "efb79dc3-17f5-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "multi03.multilsacred.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772641144, "uuid": "dd0ffae5-17e5-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "oak-path.oakshaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772642586, "uuid": "380ede88-17e9-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "oak05.oakshaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772609346, "uuid": "d38a96e8-179b-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "olf4rjbg.hardmosolenog.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772650565, "uuid": "cc3e8cc8-17fb-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "openclaw.official-version.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772627171, "uuid": "54224d26-17c5-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "oraypc.com.cn" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772627168, "uuid": "5267d4e1-17c5-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "orayz.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772658428, "uuid": "1ae0df3c-180e-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "out-flow.platypusout.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772657407, "uuid": "ba2673de-180b-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "out-v5.platypusout.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772651824, "uuid": "bad2c943-17fe-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "past-core.pastorsorny.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772653506, "uuid": "a550d51f-1802-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "past01.pastorsorny.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772656745, "uuid": "2fee94f8-180a-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "phys-sync.dysenteryphysics.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772654285, "uuid": "7588139c-1804-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "phys-unit.dysenteryphysics.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772655548, "uuid": "66606e0b-1807-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "physics09.dysenteryphysics.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772657045, "uuid": "e2a5d2a8-180a-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "plat-gate.platypusout.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772658067, "uuid": "43858a7b-180d-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "plat04.platypusout.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772623385, "uuid": "83c5d891-17bc-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-c62500800d9244beabd2934a10b4770b.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772637246, "uuid": "c9907a57-17dc-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "rock-net.stonehaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772598125, "uuid": "b37e152e-1781-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "rot-node.croprotation.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772601190, "uuid": "d617f4d7-1788-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "rot04.croprotation.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772647266, "uuid": "1da1ed19-17f4-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "sacred-v1.multilsacred.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772631365, "uuid": "18353bfc-17cf-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "sky-sync.bluehaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772653146, "uuid": "ce7bf4aa-1801-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "sorny-v3.pastorsorny.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772623385, "uuid": "83d201ae-17bc-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "spacemanslot88.games" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772644266, "uuid": "21ac3ed7-17ed-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "star-gate.starhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772645237, "uuid": "64559c23-17ef-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "star06.starhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772636647, "uuid": "642fc6ba-17db-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "stone-base.stonehaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772637787, "uuid": "0bc7687a-17de-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "stone04.stonehaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772603945, "uuid": "403c8b10-178f-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "susp-node.suspendvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772607007, "uuid": "61cb8ba4-1796-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "susp03.suspendvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772648407, "uuid": "c5d57e16-17f6-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "sync-base.multilsacred.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772649844, "uuid": "1e824881-17fa-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "time-v2.longtime.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772603045, "uuid": "27e729b5-178d-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "vec-core.suspendvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772605624, "uuid": "2945e6a3-1793-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "vec-v1.suspendvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772635866, "uuid": "92e8c00f-17d9-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "void-sync.darkhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772646364, "uuid": "04423cf3-17f2-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "wild-sync.wolfhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772638328, "uuid": "4e45c212-17df-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "wind-unit.windhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772639224, "uuid": "64b5a713-17e1-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "wind02.windhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772645585, "uuid": "33f1f125-17f0-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "wolf-run.wolfhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772646725, "uuid": "db840323-17f2-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "wolf01.wolfhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772642285, "uuid": "84f6bb2d-17e8-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "wood-net.oakshaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772604546, "uuid": "a6ec148e-1790-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.sogou-shurufa.help" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772621225, "uuid": "7c6ad4af-17b7-11f1-8e4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "yandex-app.ru" } ] } }