{ "Event": { "published": true, "date": "2025-01-11", "threat_level_id": 2, "info": "URLhaus IOCs for 2025-01-11", "timestamp": 1736640193, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "84d01ed6-618e-4ad2-ae4b-9bfb262a93b2", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1736553727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736553727, "uuid": "b501de54-8874-466f-bcc1-7d91923b360c", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736553727, "uuid": "49b9ab58-81c4-4442-8115-63d9e241798a", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736553727, "uuid": "a14b146d-175d-40f7-bcc9-432a4f5357d9", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736553727, "uuid": "379ca851-70e7-496d-866f-006c88aed2bd", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736553727, "uuid": "482da7c9-a909-4bb7-a68b-e1e10a97a68b", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c1c530b-cfaf-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736553754, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736553754, "uuid": "ce6f69b6-9eff-4092-9d45-d1af4b9a10c4", "comment": "Malware payload (Mirai)", "value": "0fbeec3a8c9cc86eaf09da4ed884ad6c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736553754, "uuid": "b2b91f75-11dd-433e-acdc-b96a6b0db625", "comment": "Malware payload (Mirai)", "value": "de8cd8fb2ee55f0fef55e8b9d16d8e9269315fe424bed74a61c02777c3c825b3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736553754, "uuid": "9cb48185-7bfd-40c3-9531-cad4be4bf586", "value": "T111C3C65E6E524FBCF2A9863987B78D30925433C227F6D680D1ACDD145E603CEA80FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736553754, "uuid": "4024814e-7aeb-4586-9a62-271ecfbe0fbc", "value": "1536:O1Hhk6xrUgMP9D8M0xzOyCi+NR33NQ80yAmyj+/mdEKNOJsnWpM7E3+ZqPM/DUjm:mHh1hUgMP9D8MeCi+v3N98rl5Aw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736553754, "uuid": "84986910-0e13-47cd-ae15-3849b93617c0", "value": 118912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736553754, "uuid": "a5ace27b-2d96-40bb-8946-c9aceceae60d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1736553786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736553786, "uuid": "7ec0f007-a94a-4825-9782-a8aac5ad67fa", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736553786, "uuid": "493b6450-6284-4001-b2eb-054a6586af3d", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736553786, "uuid": "ed6dc2ff-8d5c-4f38-a2d5-50316695471c", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736553786, "uuid": "3878c999-f8d3-499f-a2f2-90aa72c8b853", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736553786, "uuid": "b71ab591-46bc-4b0d-b4bc-b9c5fad5fb9c", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1736553788, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736553788, "uuid": "e9478d84-6eeb-4f9c-8e93-853ad5781657", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736553788, "uuid": "a0af07fe-9699-4d22-96a2-25669edc6686", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736553788, "uuid": "54f6c35f-8399-4821-a797-31a72365e286", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736553788, "uuid": "c5aedb4c-01b3-40e3-b261-1bad4a278326", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736553788, "uuid": "ee0cde53-1b2b-4117-bfb3-3dbd7ea6afef", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07184353-cfb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736554361, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736554361, "uuid": "1c35639d-f0c5-4d98-9386-a9d7b901005e", "comment": "Malware payload", "value": "c10c356a63ebe50fbd9b9cb9112556d5", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736554361, "uuid": "5b0293d8-d182-4fe8-a947-2aed1ae4fd26", "comment": "Malware payload", "value": "59efd6ded223d83df0acc4fc3060972e0e9e327ca58c197c6a5549976c6eaf06", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736554361, "uuid": "e835e354-61be-41b5-91e0-a6ee07ab7a05", "value": "T11C3523F0BA7D7EC2FDC3507502A711608E0F1DFB0D79D05F91A76B624899629B2BA0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736554361, "uuid": "de22c12f-72e9-42f4-8f6e-bbcc0a688556", "value": "24576:7x8LZYOjIjWVlbk8PjkK7wxuZFNxeO6pX9IipEqRbBSDogOp:KNVbkEjkKZZPxeO6pX9IipEqWcL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736554361, "uuid": "9ff57117-cb9e-498d-a75e-511b53e3bf5b", "value": 1158645, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736554361, "uuid": "9b9bbf67-9a27-419f-be45-867734144b70", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae400ab5-cfad-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736554593, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736554593, "uuid": "7d0824d2-5dfb-4f20-a00e-9347d33201ca", "comment": "Malware payload", "value": "1958ba11272d9cf840ca63471bdc5837", "object_relation": "md5", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736554593, "uuid": "45acc5de-2d3d-4187-a718-b0ed1e3055f2", "comment": "Malware payload", "value": "6d661c12ae1d9707227317cf38d939510ce6ddd7cf5d658f1e2916b03c921b8c", "object_relation": "sha256", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736554593, "uuid": "683220f3-a2bd-4404-b171-5d35917f80e5", "value": "T1BC263322112BB637ECDC997F58C7D648D6A3AF47B1CB463601D15B38622F4B0592F3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736554593, "uuid": "75d6979e-497b-43d3-8814-e80d17b34877", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736554593, "uuid": "f5cd1ba8-4daf-4e7a-9950-a89b05ca3a16", "value": "98304:eJfCoecLzMcV3n4ONIgnYEffa/wVdp4Xlq8bsnHHEy:SfLx94KIgnjfy/wVdslq8Ann", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736554593, "uuid": "b64c5bb4-36a2-4320-aae0-f4d61798d54f", "value": 4490752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736554593, "uuid": "5a65ac51-93c4-4398-84b9-770c4ee4e9f7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7801d6da-cfb1-11ef-afe5-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736554660, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736554660, "uuid": "3bea555b-17cd-4a46-a2e3-2b2d6e17077a", "comment": "Malware payload (Gafgyt)", "value": "d8d6be287e3428bc6eb16a3e05e8ab47", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736554660, "uuid": "fb0ae7de-1492-4167-85bc-b9c76cc7366f", "comment": "Malware payload (Gafgyt)", "value": "72f5f8ec4a91b6d69c3e3be588664aba1c2c511ecdfd8430dc0edf9d1af00353", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736554660, "uuid": "ec647a6a-d479-449e-828f-d117931e4e25", "value": "T1803182CE10A369707E95E877337E401834C468AA59C9AF02A7ED38F884CDF19B5907", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736554660, "uuid": "f933e85e-2fdd-4ff8-8402-07b82d2fe196", "value": "24:6TeY1iZ0dxJCcJueJ8DFxWWNx90/9cluXBSiG7VTy:seb07nJtiFcfOKBV4Vm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736554660, "uuid": "b8918b86-b717-48e0-bd80-f522d92db0d6", "value": 1773, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736554660, "uuid": "a1c655e5-2315-4479-9ceb-ff4f48c15fe8", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9466c666-cfb1-11ef-afe5-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736554707, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736554707, "uuid": "f15c7436-c335-4da7-92c3-0d771afb3426", "comment": "Malware payload (Gafgyt)", "value": "df7cdcbff0e8955f819f4135b79bea6b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "PercXSwarm", "colour": "#74596f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736554707, "uuid": "11bf816a-d6f7-4196-857e-2b8d7546be19", "comment": "Malware payload (Gafgyt)", "value": "519998735de4fb37798bef44420a65c1e32708014adf8f9dcb37e978857049a1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "PercXSwarm", "colour": "#74596f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736554707, "uuid": "84b46c39-6506-410c-8c0a-cf8f4f9bbaaf", "value": "T1DFB31892F900EFA6F40EE77604D34B257270BFA10F531666B31779AA9E362D42827F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736554707, "uuid": "0089d295-a594-4344-97f3-3c47515a7acf", "value": "3072:VXRF0CB1nfTLGM7xLvQyoeRgDRmmXQcUcAgnFURe:VX70SfTLGMayo6gDRmmXQcUcAgnFURe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736554707, "uuid": "11a435d9-2b4c-43cb-8097-d89a70d88418", "value": 112826, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736554707, "uuid": "5096e329-805a-435b-9a65-002e0135912d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c0a9209c-cfb1-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736554782, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736554782, "uuid": "1cf4d708-8af1-4a6e-8886-bcc5a633042e", "comment": "Malware payload (Mirai)", "value": "1af701880fcd38af8e8fe5865d2bed97", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736554782, "uuid": "bbfb137c-0062-47b2-abbf-9e178b462317", "comment": "Malware payload (Mirai)", "value": "6e4ba85cc1b0594d079a3232d439608f518087b4ac21add5bf4d65c8f121f449", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736554782, "uuid": "f512b28f-fde4-4148-945a-7dc86f21b6ea", "value": "T166C3D91BBB760FF7D85ECD3B01A8074534ECA71621A87B767538D828FA4A54E46D38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736554782, "uuid": "f1f6d4e6-bc43-45c3-8201-1e83893e6091", "value": "1536:XVNbo/8hfnYNEvKVHFInZvTBRqFYoNL3bJB6mpnVhmsqJJCqpOLzlph0ytIgPlnH:XVNbo/8ZnoAK9FIZtRqF1tYpO5H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736554782, "uuid": "2ce6ca32-ad29-417a-988b-0b2f78b12d07", "value": 122160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736554782, "uuid": "496fb280-e156-45d1-b1eb-3c06444eca0c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "338e1a6e-cfb2-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736554974, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736554974, "uuid": "012bea64-306d-4e45-9ad6-19c445204839", "comment": "Malware payload (Mirai)", "value": "d0eb912b07ac14d278e7690899f9e615", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736554974, "uuid": "eb89efff-f5bd-459b-896a-aed381bc6b7f", "comment": "Malware payload (Mirai)", "value": "84de571744b789ed99208292bd81b1e31934d066f24ec23808f05d1d8d1b46d1", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736554974, "uuid": "d38247d3-1fb1-450c-895a-adc8952d4c82", "value": "T16993E986F8815A11C6C146BBBD2F055E3307ABA8E2DE7313DD241B64778BA5F0F275", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736554974, "uuid": "8e9a6eda-9eb0-46ce-9fce-fb8af696a0af", "value": "1536:QsnxNkI313FOikv2l7aLHCHTIn+DB+gMqiABBdJGDc2n4Q:9JFE2ELHOBdJGDr5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736554974, "uuid": "df1b1b7f-2508-45df-b836-c131327509c5", "value": 89832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736554974, "uuid": "e9bd961f-1939-4ff4-b061-ae1cd841bcb9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d50fa521-cfb2-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736555391, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736555391, "uuid": "93cf19b6-d434-48c3-b3d3-c22f9479d2f1", "comment": "Malware payload", "value": "70da0081a98cd08634482b88717c2337", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736555391, "uuid": "dba7d18a-e495-41e7-a0b2-3f374147f365", "comment": "Malware payload", "value": "e9a3217c79887724e8ac10626fcb34aa77d55f00c9fae6d1e3c538c1842af920", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736555391, "uuid": "c8faa5d0-8bfb-4ec8-8c79-7cd952977712", "value": "T1A77412F3ADE87840DE0549B907B174652CCAFEDF6C9A0A63E4FF2D64349023574B4A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736555391, "uuid": "5e47b3af-eb95-48a7-8c45-6ad6838aaf4d", "value": "6144:ZSPlK6hzm142eK7ssPnI6hzirXMVpOmqO0E9KxBoKWPVuYIcq4fFT:GmuLK7L0COmF0E8xZWPV9IUtT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736555391, "uuid": "7c9228bd-e655-4382-9fa4-f33d7b126b02", "value": 362485, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736555391, "uuid": "88831890-cb29-4abb-a3e8-33c5adf30107", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80023d99-c2b1-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736556530, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736556530, "uuid": "3a2bf89f-7cab-4134-9515-272aaaebd0ae", "comment": "Malware payload (Mirai)", "value": "7b439f437784a01424eaabdc749bebaf", "object_relation": "md5", "Tag": [ { "name": "501", "colour": "#f1cef7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736556530, "uuid": "d45edbf2-7e41-4c51-86bd-20adadb8ff31", "comment": "Malware payload (Mirai)", "value": "d2ea0eed1f82458ed76a956ca3fd1f72d1c1e29b40a6118d1e5f1e6d78418077", "object_relation": "sha256", "Tag": [ { "name": "501", "colour": "#f1cef7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736556530, "uuid": "5e275fc1-b246-48f6-a3a1-12266b89d85b", "value": "T16863F74BF9819B11D5D921FEFE4E528E331357ACD3EE32029E155B247BC692B0F2A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736556530, "uuid": "d6a33e61-6320-4fd4-94e6-2e79eaa3ef7c", "value": "1536:yhn8AApie1GL4Hs/6H/LuOs4rb5UijsIXXlQkVdlZPiw3ooBUF:G1CGLGY6Tv5UMsIXXZrN3FeF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736556530, "uuid": "5dbaaaf4-2599-4f34-b960-5e792ad9e8de", "value": 69584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736556530, "uuid": "63b85da4-5a52-4bce-a6f4-c1a493f52cad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bdb6e198-b78b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736556534, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736556534, "uuid": "98a10d37-ac27-4cd2-9d58-b0a16cadbcb6", "comment": "Malware payload (Mirai)", "value": "98b060382ec51fe2c71646b599956cd1", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "501", "colour": "#f1cef7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736556534, "uuid": "e3ebf50f-12a1-44b9-a4af-5fe965fa531d", "comment": "Malware payload (Mirai)", "value": "2f66b28645b910c0fcb7a751e9a0dad86fd2be825d07f45dd6ab086ec2eeafc0", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "501", "colour": "#f1cef7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736556534, "uuid": "64d10e15-7d99-4081-b78d-60c6ec094676", "value": "T1D1132A46B9C2CA16C5C092BBBA5F839E372623ECD2DF7307DD056B747E9246B0E264", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736556534, "uuid": "6fe039b4-01cf-444a-a52d-577ef577e2c7", "value": "768:CqD8vZou4oiufeycU2ttrFn62emKl2mkM+GRl7QZiyc:rnojv85/XKl2I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736556534, "uuid": "19aaa83f-691d-429c-9bcd-e91f1301becc", "value": 43304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736556534, "uuid": "a1dd6098-f45d-4e9f-9b34-3e062fd23b5d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64ccf84d-cfb4-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736556536, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736556536, "uuid": "74ae7b04-409a-429b-ad8c-d473dc44941a", "comment": "Malware payload", "value": "300ba65a3adf770edf4e73cbfaf6cbc3", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736556536, "uuid": "551f2670-20ec-4e9d-8b9f-09af55092e94", "comment": "Malware payload", "value": "2832c3d88cd714164650000214d128244a512de99c80fc752e7d3a9e275b985a", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736556536, "uuid": "72f7182f-4a6e-4fbe-b3b7-6baa48483bcb", "value": "T1A5353330FA69A6C0FED1047C15DB31490F1F2BE70F64748E42631761D6EE62EE17A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736556536, "uuid": "438c0d58-2fbe-438b-90bc-3823d7822916", "value": "24576:oEHLcUe9gjQEJnz1lbkwPjSs/uLOZDliSe/fWncgw3NV:oEHY2ZfbkIjSs5ZRiSa1B3NV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736556536, "uuid": "4d599e16-7a4e-4259-bfdf-5374e75c19d5", "value": 1158548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736556536, "uuid": "3f8912bd-5609-4528-8c7b-6193ff83f3e0", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bdbe05d9-b78b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736556536, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736556536, "uuid": "acdc4eef-ce71-4cc0-a633-b4472365cb7c", "comment": "Malware payload (Gafgyt)", "value": "068d8070d6463f29e947d66cff14bb5e", "object_relation": "md5", "Tag": [ { "name": "501", "colour": "#f1cef7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736556536, "uuid": "39047030-a462-4340-a1c6-a82c6a6dab5d", "comment": "Malware payload (Gafgyt)", "value": "18c99e6db38118a4d50a0bca8dd475f700d3ff172a73fb6a48bdd599d4abae95", "object_relation": "sha256", "Tag": [ { "name": "501", "colour": "#f1cef7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736556536, "uuid": "f08ed3a7-4b5f-4f30-9892-2f824ae56a1d", "value": "T17653941D6F618EFBD8ABCD775AB84702358C640621983BB97D74D524F78B04F06E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736556536, "uuid": "d1bd7882-8159-482f-8380-3d04b816c634", "value": "768:dBUGQ74WGsbnztbkrba8HhdFg56ddx6eSxXe+uK0XSEIigW0bXi1pwp6p0HQZiX0:2kWJbnztIreEeHDxX/uK0JIigBTp62m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736556536, "uuid": "8d56f6c0-adcc-48da-8505-c5d5158f6e86", "value": 63420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736556536, "uuid": "998a3c7d-1996-4df5-b967-f9a02980628e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bdb0dd96-b78b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736556538, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736556538, "uuid": "e6b03f89-3277-437f-b61d-0dc0934490c1", "comment": "Malware payload (Mirai)", "value": "a8f6f2c9d8bddfb5ae3c0390a0a5a26a", "object_relation": "md5", "Tag": [ { "name": "501", "colour": "#f1cef7", "exportable": true, "hide_tag": false }, { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736556538, "uuid": "4625e1a7-aca0-430c-9595-d48624e4b8af", "comment": "Malware payload (Mirai)", "value": "c8e95910c3019666f111301f11633bf8c28e2b3737eb87615a396dd41ca7e520", "object_relation": "sha256", "Tag": [ { "name": "501", "colour": "#f1cef7", "exportable": true, "hide_tag": false }, { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736556538, "uuid": "952232f2-ce4d-4e15-8b69-809f60e011f4", "value": "T194232903BA9280BDD054D2B09A6BB037C667797E133769593398FE716F97A101E3CE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736556538, "uuid": "ea9e1638-fd20-4b43-bf50-8d65c04cbd29", "value": "768:SugxJXBWUDM+5kc9Fo3z/L0YH2WKCPq/g0Ckb0w11z:QJRWZG/9Fo3rgYv/J0C2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736556538, "uuid": "2ee5994b-78cf-4a10-afea-fe52e173bf91", "value": 47232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736556538, "uuid": "2331cee9-fce4-4869-a5b7-75d65017dc6c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bdbcbb8a-b78b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736556558, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736556558, "uuid": "a512c45f-e4d0-4684-9200-d3fb9c409ee5", "comment": "Malware payload (Mirai)", "value": "cd99179ece8df3206ff2333d72758b22", "object_relation": "md5", "Tag": [ { "name": "501", "colour": "#f1cef7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736556558, "uuid": "3d989c39-7372-49bd-af6e-fb3a95b108b3", "comment": "Malware payload (Mirai)", "value": "0b051fb3621726c4525a268f2bb2c12456cc238b0b301c249feb2872177ae517", "object_relation": "sha256", "Tag": [ { "name": "501", "colour": "#f1cef7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736556558, "uuid": "89128cf3-98b8-4b94-8a92-a72678ab0244", "value": "T17A133A46B8C2CA12C5C192BBBA5F839E372613ECD1DF7307DA056B757F9286B0E264", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736556558, "uuid": "319ebb3c-8992-449a-bf0e-fda21f14ab7a", "value": "768:sqDZ9kpPevbdqjFkeycllaLFpFhmM08KU2fQt18Q7VQZiyc:1ZvdgFxcLzfrKUZw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736556558, "uuid": "01e230e5-aa89-4c8e-8079-28ae4fd15f2b", "value": 43304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736556558, "uuid": "2bcc42e5-190c-4a26-a19d-5de9754e7449", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f1a445f-c2ae-11ef-afe5-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736556596, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736556596, "uuid": "426c577b-f2d6-44eb-9c11-953a0cc35e14", "comment": "Malware payload (Gafgyt)", "value": "ebaf6768ac8705e48d2403468bf8df74", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "501", "colour": "#f1cef7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736556596, "uuid": "915577ac-51d8-4bae-8073-042e79a23f90", "comment": "Malware payload (Gafgyt)", "value": "4fc73b02bd0cc4d44ee8da03ce5ab8b74fb67409fb223c3f36b06dc22dc0dd74", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "501", "colour": "#f1cef7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736556596, "uuid": "c3716531-bfb6-4df5-8d51-c28e93350bc1", "value": "T18053744A2A314FAEF73C823A87B75E34975822D11AE1D648D27CF9021F7070D685FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736556596, "uuid": "d8964195-3d3d-40f5-b49f-ed81df28c67f", "value": "1536:1kOxDgAsz7DmrmaI/RZr0nZCwC0dkl4OGFlBv:XIDmrmaI/RZronC0dkl4bFTv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736556596, "uuid": "61ccae4c-f091-4ac7-ba37-0c77a8ac0e9c", "value": 61468, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736556596, "uuid": "72ba7d90-a759-46a8-b631-309061801671", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3fbae741-cfaa-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736556727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736556727, "uuid": "7aec94e7-0de3-4def-a062-05a9c113aa27", "comment": "Malware payload (Mirai)", "value": "2cb290e262a910668ec909db7220cc7f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736556727, "uuid": "2a190ef3-3653-4332-9b85-120aa47f2a61", "comment": "Malware payload (Mirai)", "value": "a0c7c82f75cba0b84dcf1a2a3e785116f06c86cbfa40d60664f890d06383096a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736556727, "uuid": "eaa4a95d-165a-43f5-911b-3bbf311c4bf8", "value": "T1F7930946B881A612C3C255B7BB2F018D37196BA8E2DB3343EC355B61739F91F0E276", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736556727, "uuid": "6195c0ac-4312-489d-8c8b-18232c7caa58", "value": "1536:Lh5/ElEG6WbBPM+RSeuIEkthKolBQKTmEvZGTl8FG/Gpxq3nkt:Lh6EGXhx0eZEewnK6EBKmFG/GpxMY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736556727, "uuid": "d18509bc-3f7d-4f29-ad6e-a35cd147de8b", "value": 91800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736556727, "uuid": "5821af4e-6d5e-4766-af4c-d5b76bafc2af", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a15c8397-cfb6-11ef-afe5-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1736556876, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736556876, "uuid": "d82c59f6-354c-4020-a2d3-eb346c3ee56d", "comment": "Malware payload (Socks5Systemz)", "value": "308501f9cb8eabbe958329d60d813dee", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736556876, "uuid": "98bd97eb-dc1e-45f9-a40e-ba34d6eb06b6", "comment": "Malware payload (Socks5Systemz)", "value": "e9c1101a79637684f374014daf13223c8595022d0f2f16783070168a281602f3", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736556876, "uuid": "ea8db080-9604-4d7e-87fe-9f9615ca9063", "value": "T168E533A267634474C001EF79FF70657A9653FE6119336060327A898B6F1F682DB1F3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736556876, "uuid": "74ffbf84-6c46-48fd-a690-f189883ddaa6", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736556876, "uuid": "f99fe13a-3fde-4d14-9f30-effd2474db79", "value": "49152:C9BcWYDjb36gwM2lnbmLwcYoObcu2kPoEaLigp7Q+Ds57nJpLgUB+Nwacep0E+7n:MKW2f3kbmckOBnyWgQ6szBB+aOpcSBVO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736556876, "uuid": "3b2af10f-9372-44a1-aa34-e009abcd62bf", "value": 3218041, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736556876, "uuid": "57161aaf-856d-4054-b147-7436a06a18ed", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23588466-cfb8-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1736557524, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736557524, "uuid": "f3e259a5-4ed5-451f-8073-a969c35f77f6", "comment": "Malware payload (Amadey)", "value": "4ccd0bf71341d905de9404374003e3e0", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736557524, "uuid": "7212c89e-c8a1-4aaa-a5e6-78c6c8a5742f", "comment": "Malware payload (Amadey)", "value": "ad8d3932761d87277b79e24fc33219d49c83454765df09ac1a4ffbb4d4aac2c9", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736557524, "uuid": "34448b38-abab-4407-bad5-a160f49e4756", "value": "T1A69533B083F3643FD48D85FA21EBAB1286791B601DDCF17B79B13A9D4E17A6528D21", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736557524, "uuid": "98bf2214-746d-443a-a8d0-e5e3574fddd9", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736557524, "uuid": "04e9e932-0442-464e-a8e7-15e7c6d3bf2e", "value": "49152:yg1F/MVss6RDgyJeECulebCKfJkWGTgddGoV1BN0uEcQR+0:bF/MVssqzYulApGM2oXcm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736557524, "uuid": "c1adfdae-9a31-44a2-8122-52ec57a9edb5", "value": 1900544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736557524, "uuid": "ae1d84de-a1b4-4e05-829e-0d3b87d71e66", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c5ba584-4258-11ed-9f24-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1736557819, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736557819, "uuid": "c103522c-55cf-41fc-ae8f-4af5f5f1d758", "comment": "Malware payload", "value": "b4f49933eb9c48755070cff97fab14c0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736557819, "uuid": "4a663c42-92cc-40fb-a09a-3f3cc277f831", "comment": "Malware payload", "value": "9d8046df14cfac84845ab578797042ec4bc111e776bd69514525abf4ea2a3de4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736557819, "uuid": "77ec6113-e55c-4176-afe2-760f195d552f", "value": "T13373D45D2FD85AE1FA453832621751562003910D53A272641B92C53444E584758878", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736557819, "uuid": "ec60c2bf-aca3-4fc5-b4c3-e0be798a7b3d", "value": "12:u4ZAH/6iO/7dmEvVuwizuTG84r+xN3VKZsslrwb2Ozezeivlln:zLV4+f4rENFKZsslY2Ozebvll", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736557819, "uuid": "ceea7be8-27bf-42ac-9d5a-adbc2a587f0f", "value": 80584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736557819, "uuid": "317c899f-18a5-4801-9c2d-d89bbaf1456d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d9653c0-cf3d-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736557826, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736557826, "uuid": "7a83d96e-5b26-4a08-b754-73b0d5090a5a", "comment": "Malware payload", "value": "fd899d0e0aa2fae59c1f27ff343bcf56", "object_relation": "md5", "Tag": [ { "name": "android", "colour": "#0e449a", "exportable": true, "hide_tag": false }, { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "Wapron", "colour": "#d9200c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736557826, "uuid": "7bf31765-8594-4101-8469-c74b94edd2f0", "comment": "Malware payload", "value": "7908e120f3d150ae76fb38a55fe1804965d07f96759ec49b70a9e7bfd1de4e25", "object_relation": "sha256", "Tag": [ { "name": "android", "colour": "#0e449a", "exportable": true, "hide_tag": false }, { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "Wapron", "colour": "#d9200c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736557826, "uuid": "739296b1-a60b-4188-b17e-ee2fa5252692", "value": "T1B4960146F36CE82FC877A0338E7A126260994C509A46DB53691DB71C69F7AD04F4EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736557826, "uuid": "91549d53-54f1-48a3-9a40-14cf3a089386", "value": "196608:R4a8Ec1DzXhVahkNaNYqu9aStJDHu1Zkf3Du7Ry/UuTTsQAu8TMXJQpK3D:RZc1X+Nfu93ZHu1Z0zCRy/UuTQiV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736557826, "uuid": "c17ff4b9-1ec3-4f3d-af2a-75e8a56f9d0e", "value": 8616515, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736557826, "uuid": "4a7d9590-06e0-4b75-8c68-01bd262c73e9", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98ed37aa-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1736559609, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736559609, "uuid": "036a9dd5-042c-4941-a4bf-8e746a04bb6c", "comment": "Malware payload (Mirai)", "value": "f33e3ad3d114f55dc0ead8f17c21153b", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736559609, "uuid": "f623fa98-bad6-4d32-8cab-260d459473a0", "comment": "Malware payload (Mirai)", "value": "21714f89a31bc7265ab0b0efef9aad6aa8409257978c43d28524c72e9bfe9772", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736559609, "uuid": "3014f364-be17-4f21-9216-7132085fa3e2", "value": "C564C08AED00AF61E4D521B9FA5F034973634BACD3EAB111E6249B3437CA65B0F7B045", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736559609, "uuid": "e808f026-dc6c-4260-ad70-49b118657a85", "value": "6144:2IIKXhZtL7jOTyIG87XTabE5wKSDP99zBa77oNsKqqfPqOJ:ZTj8w6TabEDSDP99zBa/HKqoPqOJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736559609, "uuid": "5920d891-adf0-4e9b-8cb8-aa7540ae92d1", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1516dca8-cfbe-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1736560077, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736560077, "uuid": "d86a06d9-5e4a-4ea1-b929-92f899b551ff", "comment": "Malware payload (Amadey)", "value": "b1e5d5409b3b7057e965ac37aa50b7a0", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736560077, "uuid": "f2a72845-b4d8-4c84-ab94-378bc851308e", "comment": "Malware payload (Amadey)", "value": "72eaf50129fe6426338289ff748983f9f696d6489f62a542881131286f50c8f7", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736560077, "uuid": "8b590d6c-ad8d-4a05-b26f-4a15d7b3f0cf", "value": "T1C4953342CDC7E377D02D1BB22A7A0351396144480CE12DFB9DE46AF4DCA4EFE2B695", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736560077, "uuid": "565768ad-0c92-4768-9873-4a1ebf3ede70", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736560077, "uuid": "0e62f71a-cb0f-4e36-bc37-8f96c9292749", "value": "24576:V3J8xHUeC1B7zOB48M/SAHSueO4ja+F9Bm+5v6mMDscNImh03NfGUhjzJz1GSok7:pqtxBToX6asfm+5NA7hiG8d1G5kmOn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736560077, "uuid": "9b48b2b2-c1bd-45be-9a9c-238dc1ce6615", "value": 1968128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736560077, "uuid": "94ad5003-513a-4b38-ba2c-f72f720755a7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1736560747, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736560747, "uuid": "4b361c6d-7285-4ae3-8922-427fd2ee1668", "comment": "Malware payload (Hajime)", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736560747, "uuid": "5cd4ea65-06f8-49d6-b77d-b4cb430ee8fb", "comment": "Malware payload (Hajime)", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736560747, "uuid": "430a44c1-2d5e-44bd-b4c2-37a77f5b5820", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736560747, "uuid": "b1624555-1076-424e-b854-73c7d721fa37", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736560747, "uuid": "ead62acd-5076-4339-8324-b36512894f05", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1736561045, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736561045, "uuid": "26683117-9be6-4554-81e9-40599f74f5bf", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736561045, "uuid": "945f64a0-fba8-4b48-9a7c-d56f46025ce3", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736561045, "uuid": "6768bc22-552c-442b-a15b-717b13e7c2da", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736561045, "uuid": "82a1b46f-cc70-4d9e-960a-899e7ebc126d", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736561045, "uuid": "4f4640b7-dcde-490a-9654-ece9352624e5", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f333394d-cfbf-11ef-afe5-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1736561240, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736561240, "uuid": "f3b7b64c-3009-4854-9617-ea252d6fa6d4", "comment": "Malware payload (Stealc)", "value": "c283c91c861340ce8074cf6e7ad9bb3b", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736561240, "uuid": "7e832063-2a50-4d98-9303-fc5a6f5b33aa", "comment": "Malware payload (Stealc)", "value": "9baa1f420e050943fecd1e640e00cbbaaab4dc0a633711dcc006de33e99daab0", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736561240, "uuid": "d8855727-5c06-48f9-bc29-c76b4a15d94f", "value": "T19D8533120D070F7AFC7581BD27580CAF5E0796C69A7188C8704995B19EA3673CE7BF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736561240, "uuid": "fb3a574e-16af-4bc4-bf40-f7c6f4266446", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736561240, "uuid": "db4852f0-15f5-49e7-bac6-18d0f4df04ac", "value": "24576:bAQFVyAcj34T+dwGHfOk/iuObyxtemPHn2MgCBK6Drs2quxgzyn30ZOtM:LVy/4DqOag+TlKuo1uxgzyET", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736561240, "uuid": "3b1f120e-37cf-4422-b087-1849f809420a", "value": 1816064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736561240, "uuid": "3cd3f4f3-117a-4513-910d-68152dfd4dc4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59c62165-cfc2-11ef-afe5-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1736561910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736561910, "uuid": "9846e707-9484-4e4f-a3c7-68e091979f8c", "comment": "Malware payload (CredentialFlusher)", "value": "b21853c626fc6e94031281aa3ea39144", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736561910, "uuid": "5b0f4751-3e23-42c6-91a3-e2b1394169cd", "comment": "Malware payload (CredentialFlusher)", "value": "81e7f90950e4c9a62a8553956ecc3951f2ea2f2bba3baf6da3f6c71eb3891e03", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736561910, "uuid": "9b226913-cbf0-4463-a6f4-ed1149e93382", "value": "T16B25AE0273C1D062FFAB92334B5AF6515BBC69260123E61F13981D7ABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736561910, "uuid": "409c2303-b587-4572-94c3-2c26c7f65eb5", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736561910, "uuid": "70299bee-a0df-4372-99d8-264f775afc24", "value": "24576:ZqDEvCTbMWu7rQYlBQcBiT6rprG8a99x0L:ZTvC/MTQYxsWR7a99", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736561910, "uuid": "423c4a17-07a8-4b6a-8e58-8fbaa2814ca4", "value": 970752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736561910, "uuid": "29d33fd6-6020-4a22-9d54-5290954834b2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c40fcd2e-cfc2-11ef-afe5-82aee05be84a", "comment": "Malware payload (Xorbot)", "timestamp": 1736562089, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736562089, "uuid": "603daee9-65cd-4de9-9e1e-6e0adf067d0d", "comment": "Malware payload (Xorbot)", "value": "54f754790605b756f608de56f178ee15", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736562089, "uuid": "6bec754f-f299-422f-8c93-c353c1b5af0f", "comment": "Malware payload (Xorbot)", "value": "67f838de57398d5f8f7d5f19864366633116391dbc8bdf721b83466372410b1c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736562089, "uuid": "7bd7e8ca-a38b-45cb-98d9-8ef50065bd37", "value": "T14922EDCB23D17032E580498AB7B5D284F042F6C5F6A35FCDD8DE5EE46048BAEB9D4A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736562089, "uuid": "9c28d770-9468-4520-95a9-3ccae1464a28", "value": "192:ZjvlIokdhdpw8cH6jzjIsKjzjIs0jvlIobhdpo:Mdhdi8cH6jzjIsKjzjIs6hda", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736562089, "uuid": "1bc49de7-f2b3-44b2-85c4-10a1c340d962", "value": 10578, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736562089, "uuid": "a2536b18-4d80-4bb3-8826-529e3ab270fa", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea85bd9c-cfc4-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736563012, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563012, "uuid": "20129d29-48c8-4450-a88f-7a9f75ead1a1", "comment": "Malware payload", "value": "b8dabc546474f3a4d6a992c4d1b0ec07", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563012, "uuid": "9152aea7-ab70-4f25-9998-9254aa868ee4", "comment": "Malware payload", "value": "38029d5cc8c79aab24a5761733b20e276308326962b103967389b63eb5941ca4", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563012, "uuid": "d1265e41-42c1-4546-8fc4-a53e93ccd4ee", "value": "T12E7412B7E9A87D01CE164EFDC3A5A0E59C8EBFDF6D1E1653CC6F282A744022261F05", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563012, "uuid": "8ba63893-1366-4b3e-9ac5-6b4bf1d36ff0", "value": "6144:zecWR96i4dQPF06hVSPT+AO74Pn46h9SzDfMw5jbUYs2kHAT:VWRgije7+AmeaPfMwmvHAT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736563012, "uuid": "af0df04f-b737-42e8-8286-169dcb554e2d", "value": 363244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563012, "uuid": "bed55786-774f-447e-9fe3-f04577e9f60f", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea5912e2-cfc5-11ef-afe5-82aee05be84a", "comment": "Malware payload (Xorbot)", "timestamp": 1736563441, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563441, "uuid": "b2affa28-83ab-4dac-b8e5-e542f54f6a12", "comment": "Malware payload (Xorbot)", "value": "e80327aef8a4ea53a0344af0a2819fbe", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563441, "uuid": "6ecb3083-aaea-44da-83ab-90fb8d1b1fe7", "comment": "Malware payload (Xorbot)", "value": "1f0ab428605df7b5bd5f15ac929735033c2e56cf59b9df3f63450670399eb279", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563441, "uuid": "8655ed93-3e18-421c-ab11-6d552b6bc46c", "value": "T13122FECA42D13E332448494EB6B5E024A083A6C5F7CB6F85DCDD1EE4684CB8FBB54E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563441, "uuid": "d9c58296-99a9-4135-a908-a3d536a365cb", "value": "192:7hFlIoqtNBpwk6RazDjIs2zDjIsehFlIoTNBpi:QtNBik6RazDjIs2zDjIs+NBg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736563441, "uuid": "5897c565-bc09-4278-81f2-9f6bce6375b6", "value": 10494, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563441, "uuid": "12f4c061-4c96-4140-b524-048cd938c5a8", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb846491-c51b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736563751, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563751, "uuid": "b68d8889-7a53-4128-925e-daef36cc9e3c", "comment": "Malware payload (Mirai)", "value": "6f0969a6b752070a0235a1f9c06a9f5b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563751, "uuid": "d2990d5b-d8a7-4fff-b7bc-58111c7bfb39", "comment": "Malware payload (Mirai)", "value": "34f9f64c3182eaddffc48e1de3db962ed769f05050991a4de96d3e2b376cb108", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563751, "uuid": "11472364-8981-4206-8899-2217836c4560", "value": "T1B5D34B47C8A29F77C0566EB629BB5534075AFA120B4F0BD664386BF4074F9CEB40EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563751, "uuid": "ef0475b1-8bcd-4549-a81c-8289aa57fbe1", "value": "3072:nEnsDHhq5flNx3awEM0mr+ysHYBWqUmGynRNhu/Gvg3nD2w+//Tp64:EsDHcflOcbrimUmFNIGvg3nD2wo/Tp64", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736563751, "uuid": "bb40ec7c-c62c-4b47-a328-b6bf4ea99933", "value": 135479, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563751, "uuid": "f109f70f-45b7-4f2c-8c7c-0f7ea572977c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "12f6cdd4-9f7a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736563751, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563751, "uuid": "08985c3a-3b06-428c-b4cd-3da9a232b626", "comment": "Malware payload", "value": "a2bab1fead7d299c82493acf7dc267f0", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563751, "uuid": "c28d1578-5a09-4847-8f9d-193dcdef8fd2", "comment": "Malware payload", "value": "7d5d0777b8ead280d7a9bfee49526a55d7a3f8e9b2018c55a2953501c72e1882", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "WebServerPirata", "colour": "#f52918", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563751, "uuid": "55ebfdf3-c8c5-4510-a73a-7912cbc0a8e5", "value": "T12E41E38B6062EF325DF09963366BEB943090919BD1CE5F1958FC79E940CCE85A3C4D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563751, "uuid": "9742e8f4-599d-4d99-96d7-482be3e365e1", "value": "48:v5u5EB5m5q5gJ5W5u5S5K565kL5N05vWfsx:v5u5y5m5q5C5W5u5S5K565kL5N05Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736563751, "uuid": "0e41fc50-45ef-4a0d-950f-dc9885e851e1", "value": 2041, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563751, "uuid": "93259b56-4e81-444e-bc69-dd03a35931ac", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5d92ab7-cfc6-11ef-afe5-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736563810, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563810, "uuid": "bf635ec8-6154-444a-81be-f3dc800092ed", "comment": "Malware payload (Gafgyt)", "value": "8da1fbd34e60ab2bd393d4422dc3f6bc", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563810, "uuid": "dc699303-7979-4aab-9e19-b42935254c43", "comment": "Malware payload (Gafgyt)", "value": "499d5ae87707bf9914888f6bf4fbe88ac6b8e2f76ac3f466bcdf6269c40dacba", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563810, "uuid": "010c712b-68b6-4d82-9a67-deecd9383e2e", "value": "T133532A49F9815F21C4D522BAFA5E018D336357ECE3EEB1129D211B2037CA92B0E77E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563810, "uuid": "945e7a43-0306-4582-a180-50898008fbd6", "value": "1536:Amn2YUGwUWDHNMwV2CIwnQYUcENlkqiIWjdqVf/nP:Cbn2CIwnQYhpjdqZ/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736563810, "uuid": "a744f814-a0d6-46a1-90ef-8e6da3d9eb16", "value": 64112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563810, "uuid": "05242f12-2926-41ce-8649-77c6ae0d40bc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5e0e37a-cfc6-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736563810, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563810, "uuid": "6464f4a7-899a-4357-8de5-e292c73e0bc1", "comment": "Malware payload", "value": "24ef579fdde7ec694409cb5ad2476c45", "object_relation": "md5", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563810, "uuid": "b6427bba-ab0c-4db6-b65e-facc940d0bf3", "comment": "Malware payload", "value": "ced0e85a26c9457902af7951b94799b31b44c91a92c1004d411d900c7146c8cc", "object_relation": "sha256", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563810, "uuid": "67c01c2a-b86e-4c2b-8a29-d8a9977108b9", "value": "T1CD432ACBF401DD7EF84AD67B0C564E5D7671B2E106C3062613ABBA6BE936188291BC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563810, "uuid": "d1b70126-f5d7-4392-b9d7-f806247bb835", "value": "1536:CPf4fce4RRk7R8qqnQeuacWjcW0JcWcBftCuI5EGzl16quC:+0cxnk7AnQeuacWjcW0JcWcB1CuIeFqH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736563810, "uuid": "f91cb224-9c63-4456-b539-83dfdd1924a0", "value": 57944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563810, "uuid": "f69a4478-6c01-4157-911c-1ce91c314b5f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5ea3dad-cfc6-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736563810, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563810, "uuid": "baf8b8d1-ebce-423d-a16b-3a3f31631c41", "comment": "Malware payload", "value": "1c58def720c57a0061a2b0135b64b47d", "object_relation": "md5", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563810, "uuid": "749277f6-19fd-4a0d-8297-e43a26cc9900", "comment": "Malware payload", "value": "b08f4de964d1964a50347333c41f9331eaee225e62ffe6fae101f92aa688fc84", "object_relation": "sha256", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563810, "uuid": "66864ed5-feeb-4a59-a14d-83fc71b0689f", "value": "T16D336C67E4252F63C0065A796434DF3C0F2321E192567DB26E268AF81C87D5EF848F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563810, "uuid": "0e6e85e6-0f2e-4ee5-bb74-0d852922cfcd", "value": "768:Xr+FeRb4+SsopI3eFRR0ZdZ+V1ox0KNCJ0DjwsUKyw:7+Uzop70Zg1oxfCJ0DsKL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736563810, "uuid": "5aecd41e-e025-40e5-b5a5-51bdf1ecb848", "value": 51464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563810, "uuid": "d9378016-9434-4893-8e4e-5409744dce5b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5ebaaa2-cfc6-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736563810, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563810, "uuid": "c8f5950d-d281-433f-b250-e55499c141af", "comment": "Malware payload", "value": "5314bc91de843150e3a3252246e2bcd3", "object_relation": "md5", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563810, "uuid": "bdde490b-d737-479f-aaa7-86fd30bda04e", "comment": "Malware payload", "value": "8411a8b5f41adeaf842c3229500027dcebc4e82a560c923ca8a77996c1fcbe6e", "object_relation": "sha256", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563810, "uuid": "f69d291c-43af-4e6f-b5d0-a0b9c088e8db", "value": "T1D8E0ECC4B4B332B34F4E2D0AA372886D1562A18C0C625291AD5A826DE574B45B7305", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563810, "uuid": "89590c62-d6ac-4aba-b372-3f37d9e6ff55", "value": "6:aSF0Xho2e1jakF0Xho2cXsoE3cRF0Xho2Ma0LKif:jCxe1LCxccoOkCxMa0LKs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736563810, "uuid": "c7f3780a-fc88-4359-bdc8-d590a71a9725", "value": 302, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563810, "uuid": "2b1667ae-26d2-4d13-a1ac-603514d75c55", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5f4a8fb-cfc6-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736563810, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563810, "uuid": "8022a313-7494-4c4e-86d9-c12b8b4197bf", "comment": "Malware payload (Mirai)", "value": "8c7b72161082b652c42c91091c479471", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563810, "uuid": "84897a1e-df1c-4ff8-a3f8-01d0d5ed0186", "comment": "Malware payload (Mirai)", "value": "04ff0628b46e45010d4579d8a1ae4ae87b10782526e17fdbbd91f547aa24a06a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563810, "uuid": "37b427f1-cf42-47b9-8dc0-732eaca193ab", "value": "T12B431A0272250E57E6934EB42A2F2BD0D7BB9DD026F0F6492A1F7B554D72E370483E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563810, "uuid": "2da8fb0e-1c4e-4aaa-91d6-0ee5876487c6", "value": "1536:grn8Zo0iS/XZG5uiwGCgptyTU+NhlF/0I:gLSo0FPGuZXg0t8I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736563810, "uuid": "bf0daf5e-b4b3-48fc-885f-69f885f99e9e", "value": 55268, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563810, "uuid": "e997d8a9-be98-4b5c-bec0-6a165701616e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e7f8157b-cfc6-11ef-afe5-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736563867, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563867, "uuid": "0cf17b3c-ec7c-4713-8424-23abbbf05256", "comment": "Malware payload (Gafgyt)", "value": "47020b60d4ed4203f1c23ce3a82b0701", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563867, "uuid": "a184e1b7-9919-4ab5-bdfd-906661c3a5e9", "comment": "Malware payload (Gafgyt)", "value": "e67d9147d34afcaaf8a25004f4c5e0a534e2c2742b907826fdbddd8149df3c0d", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563867, "uuid": "8c1b434b-d36c-4436-8fc2-3ff0cb66eef0", "value": "T1BB331896B8814B22C5D51279F96D128E372357F8E3DFB2239A212F2037C796B0D36D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563867, "uuid": "7f12826d-f5e0-4fea-984f-80950663f2b7", "value": "1536:wfnmmzQtUrBeND75llD5IWzxXIDOihjF17b:pugllD5RYx517", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736563867, "uuid": "30b8cc10-7ab7-45c4-98de-64c75f395f9f", "value": 51248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563867, "uuid": "d6eaa949-7eb9-4706-81c6-27753004cc13", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e7ffaaba-cfc6-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736563867, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563867, "uuid": "d97bc8be-0dfd-4e7f-94c0-6e15103318f6", "comment": "Malware payload (Mirai)", "value": "64b6322af71b4fd8a9db22a3ab38a536", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563867, "uuid": "d3ca30bc-4fad-48a4-871c-3bd04648af6d", "comment": "Malware payload (Mirai)", "value": "98c91e6adc0564aab70fd17e81fd837ba3b2a4a89650e99da2870adc85a5ff1e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563867, "uuid": "8c8d07ca-d32d-402b-9d30-f17d5c19186e", "value": "T13673E724BF510FFFD85BCC3711995B0524CC995A32D6BB2AB574E818F94B24B0AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563867, "uuid": "3cfacde7-a7a8-40dd-9424-58f529a28508", "value": "1536:vNi0OdS29XaofKe04DiJJc2cYVzNi0+uf01rX8q:vNi0KSUXaoSuW42FNl+J8q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736563867, "uuid": "1ee17565-9345-4fc5-a150-4074ece30f7f", "value": 73468, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563867, "uuid": "83f77498-b307-4da0-9f1a-5502901d0fbb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e832b008-cfc6-11ef-afe5-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736563867, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563867, "uuid": "f724fc31-2303-4f9c-bc00-c55c495e5cbc", "comment": "Malware payload (Gafgyt)", "value": "e781d95884412916c66000d2d70a152d", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563867, "uuid": "30585e70-b7d2-49dc-87d2-dd40f5f334c9", "comment": "Malware payload (Gafgyt)", "value": "47b51191b20306672347da89220f514d03585368876016dacc75010b4b0dfa1f", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563867, "uuid": "70af8f45-8e2a-4861-a986-ef55733c446f", "value": "T112332B65F84147A3C5D913B6BA2E428D372563D8E3EBB2035E221F6637CA46B0C37E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563867, "uuid": "48c45ad3-9041-4a11-bb6a-772ac92422b3", "value": "1536:ZWtH+gzQ5QhdFmvjVX69NO8Z7ve55555555555555ZU5555v55z50TPYFlz/SW:ZY10eU7B69NOO7e55555555555555ZUF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736563867, "uuid": "064c9585-422b-47a5-a3b1-8e873b1b3d46", "value": 51400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563867, "uuid": "2dee66fb-385e-4d57-ad94-ddf1907b2c9f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e923e122-cfc6-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736563869, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563869, "uuid": "6129e2de-b023-401e-9938-06616e0e1e96", "comment": "Malware payload (Mirai)", "value": "b1d52d0ea7aeb638027e8d1a61409cf2", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563869, "uuid": "de7b2070-1591-4dc0-b8a4-4a72d3f3b415", "comment": "Malware payload (Mirai)", "value": "729fab65ee724ad77a5952f06c6402be15595dfa9e32fd13d8d33c25cb4140db", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563869, "uuid": "83379027-5cdf-4cc0-8f44-06b66afc245e", "value": "T1CB135B84F543DAF6D88701B41092FB7B9630FDD9329CE647DBE9AA72BC425109807B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563869, "uuid": "c7a0232e-0c1b-446c-b055-9be0a600126a", "value": "768:iSrwjTuGfROjdK3/A3qY+ssi1KBXMQ0XqNZ4PmNL0jT82sw7:ijqK3/A3qJqyX1eqNZymNLRjw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736563869, "uuid": "8d3b165a-e7ef-4e68-b3ef-7537918dcc08", "value": 44788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563869, "uuid": "dc0dd5b3-e140-4f33-a9a6-c244839b141e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee744a71-cfc6-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1736563878, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563878, "uuid": "18ad9f09-4d1d-4636-960b-1dcc64df47e3", "comment": "Malware payload (Amadey)", "value": "366a13d06c1affb91da8ec7b2c535c1b", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563878, "uuid": "7abf97c1-5eaa-4d00-be16-7657213ef7d8", "comment": "Malware payload (Amadey)", "value": "212e77536cf105f0fdbc3c8cb5117e7cce4bd95451e2cc5a6ceaaecce541ac45", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563878, "uuid": "4220f435-3117-4731-90ae-0423482526e1", "value": "T1DC953366BFE645B5E82CE033D993AEE2B7600A05EDC7B911DE0E177270E3648CA174", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563878, "uuid": "7941a7e6-b474-43cf-b76f-c7e1a9a1169d", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563878, "uuid": "dc979902-f8a4-4a5a-97ba-6c26aefc5fcf", "value": "24576:6GRxPymY/KsIZp41dLGQeG/iWIEMCavme2GsBqYX5PTRwUfwIIzh1GjNgzozNQTR:64Y/KsVbLreeYEM/sGsUSZtwOWGfJK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736563878, "uuid": "c2cf54b6-a5c2-49be-a078-8c0ef6b27e50", "value": 1928192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563878, "uuid": "89c024e6-7eeb-4bac-a08d-8592c9e43b37", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0dd50453-cfc7-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736563930, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563930, "uuid": "73202df0-4e99-4408-8920-368b95b36da9", "comment": "Malware payload", "value": "c53e038457ee218f315120be3489cae9", "object_relation": "md5", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563930, "uuid": "68ae9a9e-6c18-45ca-b066-b1282c20b4aa", "comment": "Malware payload", "value": "769d08e769b7b87b75a05b81417754daf74f19dbce2292e4c9906f16c1e744fa", "object_relation": "sha256", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563930, "uuid": "fccbd011-18b8-459d-8da9-4e91c8be54d0", "value": "T14B63D85E6E118F7CF28DC63447B79E2596682BC627D1C081E26CE6102E2175F681FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563930, "uuid": "504ad145-60f2-4328-a442-5840a1ada091", "value": "768:TeXPD4F4KDYz4rid2Vn/fyLCW6ab4M8+pMdXGlTe3T+XkYqK/Up222TwwBsv5iTg:ldyLCxM4n+OpKXJjENjIZlg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736563930, "uuid": "4b1a639f-83ac-459f-a0a7-d75980a78f36", "value": 72972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563930, "uuid": "602b3525-4017-4a6e-b122-7e34ebeac61b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0de04ef3-cfc7-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736563931, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563931, "uuid": "70ab57e3-1c66-4a0d-a62e-c4ca9e3efe9d", "comment": "Malware payload", "value": "eacda0ea070ca1b3168fa1d059f84db0", "object_relation": "md5", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563931, "uuid": "77c6f4c3-f1ca-4abc-ab6a-a8882f04bbe9", "comment": "Malware payload", "value": "367446efb00c75a510a0ed29913041e0d0b0928b6e5511b19a3195b760d4590a", "object_relation": "sha256", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563931, "uuid": "b12f1c02-338a-4be1-8bb9-ab96208b4abd", "value": "T174531B627A7A0B27C4E1643850E7575EB3FA4BCD2564C20B7EB10D4DBFA89613053A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563931, "uuid": "d1335d42-38ac-4f38-bbee-8cee9c732533", "value": "1536:yGN5CY0SlWw/kMNq+12odX62ZkoUIdHrN:ytzsNq6NdfkErN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736563931, "uuid": "3736a1cf-1bf9-43f4-9a95-cc1a37980cc8", "value": 64016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563931, "uuid": "f9c3be83-0394-4df7-aaf0-6fe25451bb4e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7dcf0fb6-cfc7-11ef-afe5-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1736564118, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736564118, "uuid": "beb1211b-c701-430a-b771-d16a2a0126c1", "comment": "Malware payload (GCleaner)", "value": "cca77f26a65b07f00a21ee9ee7edeeff", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736564118, "uuid": "9b1819ee-156a-4c33-b22e-ee0f74d8da47", "comment": "Malware payload (GCleaner)", "value": "635ff2477c76b5e1cba8d5570f74e4ae9126a449a01b53b037793075c27a0fb3", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736564118, "uuid": "c34cb5d5-8f63-4667-853f-83e6af6a691f", "value": "T18995337584E60ABCD92AD2376C32FD3133BA69A702F5FF3519231D945263A1392D78", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736564118, "uuid": "907dd0a8-e643-4807-ac34-669485a5fec9", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736564118, "uuid": "059c6d65-9b36-4a32-8f46-3a2cf3d81917", "value": "49152:pI6BvAYaUgdsVQCJDd8t6QAM3tbXmLCOvsu:qeHrgqvUzbXOs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736564118, "uuid": "b42f58c4-ee08-4b8f-aced-f4b75fc176fe", "value": 1945088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736564118, "uuid": "3da091fe-6482-42e4-8c5c-f840a454cc3b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f06019b0-cfc7-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736564311, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736564311, "uuid": "c4a7514e-b3cb-4a25-aade-df51964caf2e", "comment": "Malware payload", "value": "d746422955bd8b9b677db50d488d4070", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736564311, "uuid": "361c4847-47ae-41b2-bdc6-326c7ae7fa9e", "comment": "Malware payload", "value": "78aa77f7cecf34f3f04113f154814900b008675e45e561269cd23540fb2ff6d7", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736564311, "uuid": "f47b8b40-1967-4497-94a9-fb1651ee8de1", "value": "T1FEE52991A90E71CBD88A2776552FCD82796D22F90B240AC39D58E87A7FE3CC115B7C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736564311, "uuid": "e04de6aa-7ab5-4ebb-9165-4d4c3a627f77", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736564311, "uuid": "1b3e2538-735f-49e6-877a-a3361c3d1132", "value": "49152:pS/jr+MRAk84vHL1gPW8sum8cQINMeujFkJQI:pS/+MRAF4vHxgPW8sumRQWY4Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736564311, "uuid": "db6610d5-f485-4966-8f6f-35153d642f05", "value": 3144704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736564311, "uuid": "512a2d3d-373b-4936-aee2-e222c713d64a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1736565367, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736565367, "uuid": "eda102fa-ca6f-4156-88fb-7a015d4b0b08", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736565367, "uuid": "25dcb919-56cb-404a-a8a4-bbeac6c7ac2c", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736565367, "uuid": "4d0e5a4f-c899-4354-a0f1-db7f7a2345e3", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736565367, "uuid": "eb2a7560-873d-44d6-8c3d-11d0efeab4b0", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736565367, "uuid": "ae3ce100-345d-466f-8f80-dcdd87a7982d", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c0ae04e5-cfcd-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736566807, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736566807, "uuid": "97578977-053f-447f-8d53-fe2563ef3c66", "comment": "Malware payload (Mirai)", "value": "c431a82a9b32571b2c7980a3955b47bb", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736566807, "uuid": "09924e7a-008f-4ef6-ba73-bc12e9fca7bf", "comment": "Malware payload (Mirai)", "value": "a0f9fd63704b81084bb5316b26409b847d06b94a36194f13e23b83c2e852fedf", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736566807, "uuid": "756cdf06-241f-4b60-836f-827d99033f96", "value": "T124C3D91BBF620FFBD85FCD3B00A8174524DCA71621A97B767538D828FA4B54A46D38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736566807, "uuid": "5c6d0c96-c69e-4e84-8696-27dd81a1115b", "value": "3072:DqRncIE5fJKK7FngBjqFBXWKUeEAyUX0v7p6F:k3AnYKBXWOEAyUX0v7p6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736566807, "uuid": "8c34e99e-e9ea-43aa-b482-029f581fd467", "value": 120960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736566807, "uuid": "6d02a000-d3ff-40ba-8367-87cca6e6b07d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "481bc51b-cfcf-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736567464, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736567464, "uuid": "531724d5-6ff2-4385-ae9c-0385df4e9456", "comment": "Malware payload (Mirai)", "value": "26c80e482e5206d53d661a5a5acb44ad", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736567464, "uuid": "2498d5fb-9a4f-427e-8556-5bd36b248fbc", "comment": "Malware payload (Mirai)", "value": "86be40dbc7ad18cca753fb5e4973fc8ccb2fe1c93f218f3ae14c7859f14fc39f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736567464, "uuid": "2458bce7-fc9f-4a6d-a0a9-a5724cac14d1", "value": "T19F93FA86F881AA11C6C142B7BD2F055E3306A7A8E2DE7353DD241B64778B95F0F27A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736567464, "uuid": "a1a1d567-2b35-417b-82b4-746d44500ec8", "value": "1536:O/n8u+4suChTOeGvl7aKCxj1ejnpHxMR+0M5i1UlkPGbCFnmuSAyUX0v7p6df:EeVQEKCxuplkPGbS6AyUX0v7p6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736567464, "uuid": "a37b0635-305a-4a06-970d-9b8c892c3c79", "value": 92028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736567464, "uuid": "78680287-1b63-42e8-862a-bbe64380d3c5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17d5e510-cfd1-11ef-afe5-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1736568242, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736568242, "uuid": "f9b08f66-03ee-4b0c-a377-673a20fa377b", "comment": "Malware payload (Stealc)", "value": "b9c5e9e20743d138a65092d687029106", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736568242, "uuid": "e1cd55ef-677f-4cd5-bf09-20a3822f816d", "comment": "Malware payload (Stealc)", "value": "91e72a67b31497075e3702d14f400d17412e583928261e0604209e369ba870ee", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736568242, "uuid": "eb46bb4a-7ce5-4747-8dd9-6174c9271993", "value": "T12785334C3A555772FEF685700263963F7B310893D8FA8A71268FF02A8D2746359836", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736568242, "uuid": "8b91af0c-4c16-4432-a446-593cc848ae44", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736568242, "uuid": "e23df8d7-0ae6-4178-ac45-449d1be2c1fd", "value": "49152:/fPamNBdEOhKRnf1Bo6OfzSszUR/noslTWO:niy8E48VzSlRPosl6O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736568242, "uuid": "97a531e0-4ee0-4059-a15c-2a04a139f715", "value": 1786880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736568242, "uuid": "5f868109-b5fe-412a-8614-6a6b5d649754", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7bb393b-cfd1-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736568484, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736568484, "uuid": "6bb1e855-9a39-43fb-9dfa-e3191ac4aec4", "comment": "Malware payload", "value": "24d711c7906a41647cb9515885349ce7", "object_relation": "md5", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736568484, "uuid": "28f2b47a-af38-47d9-be90-5ca442ae0ba7", "comment": "Malware payload", "value": "5117370cf51c5c6c37e6b0e674d45533fadddbdd5fb637e0d5843f169bb289e1", "object_relation": "sha256", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736568484, "uuid": "95cc2b27-e45e-4991-a1d0-4eec71a6edac", "value": "T1DBE2E1A4A48195E8DA876FF91CCFD290DFD0EA6632F88EEE31516B05C6207374790B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736568484, "uuid": "947b3ea3-342e-45cb-92cd-69055d6faecb", "value": "768:SgFx7NpwYqbjp04u3h2bs+nAP17H1QRKu4uVcqgw02NWXcuj:f7PA0RuSVCR74u+qgw06WXbj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736568484, "uuid": "949f3e03-821e-45b1-8d13-5895695afad0", "value": 32880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736568484, "uuid": "5ec5e4be-cb12-4d42-bb22-1fee61a0692e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d042c192-cfd1-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736568552, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736568552, "uuid": "21bfe740-2fea-4690-9ef7-b2339c0971c0", "comment": "Malware payload", "value": "1f8ce597fe2b2f5746ebd94039038df1", "object_relation": "md5", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736568552, "uuid": "5dfaf05b-36b7-4ce2-abdc-4fabd61f9b0a", "comment": "Malware payload", "value": "2b6073d38cc6c4468ef6f17b76ba050fec087b17405ccbde6591d87fcc342fbc", "object_relation": "sha256", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736568552, "uuid": "26d79887-d2fb-4a5a-9075-8aef0625ea5f", "value": "T1E5F2D15F122FF0FBDC0B00BA133947955DB64FB7A082ED8B9910FC975B925399812A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736568552, "uuid": "581d44af-98c4-451c-b335-a8155683b275", "value": "768:wnjI5oa+qCaoSgldbOLUIWjs03DGVfXiz8fcKJgGlzDpxYsf/In:wnjIKa+qCQgPeUIWjpWfX3dVrYL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736568552, "uuid": "a5408c08-b174-4291-93c9-3b3c45b96cd1", "value": 36828, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736568552, "uuid": "e6c18290-235d-452a-9cd4-3e4d725841cc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1da260a-cfd1-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736568581, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736568581, "uuid": "636554c7-9502-4548-bbd6-28dc2397340e", "comment": "Malware payload (Mirai)", "value": "366778b08315367d82a6ea8481ddcdaa", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736568581, "uuid": "70536b3e-5d14-4205-a5bb-1ccbc6b6c20f", "comment": "Malware payload (Mirai)", "value": "35137294137da3a15894aa17a335631372ed8968dfc892a8f13e2f8469389ad4", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736568581, "uuid": "23ecadeb-439d-4fad-a9d7-df3ac2946743", "value": "T1F9930946F880A623C2C256B7BB1F019D37155BA9F1DB33439C381B61B79B91F0E27A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736568581, "uuid": "5511862a-5b4a-42d8-852e-8119e803288c", "value": "1536:D4sQfTMJMmMoy5YRS/P6Vu02WBQ3N1AaZGj65FV/VpI4ynWuSAyUX0v7p6dU:AfgJMmtyK0/P6I0E91AcWiFV/VpI/qA3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736568581, "uuid": "15a5af24-768c-40fd-b5f9-31cc303e9ec5", "value": 91804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736568581, "uuid": "673eb28b-58a1-428e-a6ea-747b566622e1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a372e2b-cfd2-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736568890, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736568890, "uuid": "9b359df6-adb3-4ee8-a5e6-bac522d358e1", "comment": "Malware payload (Mirai)", "value": "7265109eddef9f1c42069f5adf092298", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736568890, "uuid": "3e95e026-d99f-4082-abe2-c5ff0ad000d7", "comment": "Malware payload (Mirai)", "value": "066be8e039f17fc7ecaaeb4fed38cdd36e38c846c238494785f0310dc1323c18", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736568890, "uuid": "0e5713a9-aeab-49d3-9784-76f95d643f36", "value": "T163A3094AF8816B11C5C516BBFE1F019A33479BA8E3EA72129D241B6477CB91F0F276", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736568890, "uuid": "e6be23fb-6069-4977-9658-95a6aa3942dd", "value": "3072:7E6EqnDWT0IUVEKHTDXGK05KoeAyUX0v7p6:60IUVEKHXXGKUeAyUX0v7p6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736568890, "uuid": "8d57261b-2c75-48e5-b39a-fcdaa7b64cb6", "value": 104712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736568890, "uuid": "19fb0839-672f-4c08-b85b-ec37c9ad9f2a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d838fafb-cfd2-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736568994, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736568994, "uuid": "2f0a7267-29b8-4d89-9298-0fe130d743a5", "comment": "Malware payload", "value": "69ed05eb26c364d244df727f7adbeffb", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736568994, "uuid": "6293e182-d143-44ad-b0d6-283fb8aaecb1", "comment": "Malware payload", "value": "f9ffd2f4ec4f44def239b033730c459231dacbe1d027c24587c46a7d61ab0c93", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736568994, "uuid": "b9d16ed2-665e-4cad-9ba3-01ff764f5ee3", "value": "T102B5333B63B9E509CC57E674C62662527D3B5C8B06E821BCCB17F69EA4F41097332B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736568994, "uuid": "d19089ce-a310-4222-9621-234df1b282b2", "value": "49152:xAvbmnpSQ1BS1TysondfIG2BDI0RntYwB5W4ERbNW4ERb1YYc22TFOpjtihq:xuansQ18csoWG2BPn+6WnZWnh86tih", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736568994, "uuid": "0c15d572-4e9d-48c5-ae5f-8856e8a78f01", "value": 2377206, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736568994, "uuid": "7abad2e1-740d-481b-ac15-58a84028f18e", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d562d11f-cfd3-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736569419, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736569419, "uuid": "b3321b17-b455-448f-800e-b6b2fc5964af", "comment": "Malware payload", "value": "358606e7ed5a5b8aa790683bc61d66e4", "object_relation": "md5", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736569419, "uuid": "8cf21a57-ecab-4068-8303-a2e9195b8179", "comment": "Malware payload", "value": "f7f17560e69973098fa3150c077eaad186010f9d6d7adf6e02611547461fe720", "object_relation": "sha256", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736569419, "uuid": "ae424d0e-6dda-4e5b-8ebd-f49347e8cbf7", "value": "T1DFF2E05D95E23D46CB3EB27950EA1729EF4CE1E72149E34C538D884936F6C0EE4AC8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736569419, "uuid": "ed68e041-264a-4cdc-9196-dc4da6184599", "value": "768:EEuqwET83xH7LiT9T4e8LiXggZZRuagI2GdUwcMxxEg8NyWR9:EEuPB7Li94eJguBBUU8F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736569419, "uuid": "c1287ef9-695f-4035-aaa1-54b57d0ab534", "value": 37076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736569419, "uuid": "daabf202-75be-4307-b1fe-a9bab76ccbbc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cac35352-cfd3-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736569607, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736569607, "uuid": "7cc674d7-7932-4d74-9180-6265fb1132e2", "comment": "Malware payload", "value": "50597386121c254b8a75a163b9bac928", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736569607, "uuid": "a76e2af7-76ee-4ac0-b82b-4db595d35abe", "comment": "Malware payload", "value": "45f61786161e5c8848df8ee0eb8ea968467c8fbdd32ede6ac495ab8943ffbcdf", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736569607, "uuid": "096309f6-5cd6-4a5c-8dee-36fbdbb6528e", "value": "T1663533B3A7A95AC5FDD204BC006F700D4D6F2F9B0E69308B12639762C9AE625F0797", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736569607, "uuid": "c44c0d2e-1d93-4c17-8f98-20d47565f3ff", "value": "24576:I7GYTEjPd2lvlbkMPja6Jg/KZJZJHnm4G9SfWncgw3Na86:wgEnbk0ja6dZnJHm4t1B3NV6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736569607, "uuid": "b3d32fb0-2fcd-4049-8b20-3784f3ba37a3", "value": 1158784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736569607, "uuid": "7187c780-df6e-4c88-8cf9-48f9f6067721", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45616d92-cfd4-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736569607, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736569607, "uuid": "363c439e-4a32-4d50-88cd-215e7b9f208f", "comment": "Malware payload (Mirai)", "value": "40d57a51ffba8151bf851940d0ad367e", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736569607, "uuid": "816efb53-0e66-40d0-b21c-ec90925b1ef5", "comment": "Malware payload (Mirai)", "value": "c14f6f5a9f774456aef2319034d9e6b57975164e2bdbf9a4bf178737a3e725c3", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736569607, "uuid": "9de0b91c-7b5c-48a7-a3e3-bd575a558cfd", "value": "T1F693FA86F881AA11C6C142B7BD2F055E3306A7A8E2DE7353DD241B64778B95F0F27A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736569607, "uuid": "a866ede2-429d-4bee-817a-dffd1babd7e7", "value": "1536:+/n8u+4suCJTOeGvl7aiKlj1yDnpLxMR+8MpipUlwPG3CFnmjSAyUX0v7p6dv:0eNQEiKlaJlwPG3SfAyUX0v7p6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736569607, "uuid": "10595929-e98a-45c9-a2f8-0e69a5d73c37", "value": 92028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736569607, "uuid": "c5a1937f-64e3-45ca-8cf6-863ffeafc88b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74f2aa07-cfd4-11ef-afe5-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1736569687, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736569687, "uuid": "f430c1a2-6e8c-4c31-be91-4a8d465c966f", "comment": "Malware payload (Healer)", "value": "30ee44b5329f8249dd096f2d915f6fcb", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736569687, "uuid": "146a8736-cb05-40f4-a795-d1ac47d27d0e", "comment": "Malware payload (Healer)", "value": "b1c13b08bc859faaa9f38819ba5284c80129b5d0f681e653c4b1a8d90d25da51", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736569687, "uuid": "b31b9644-aa48-4f0d-a2f9-0810cd826a8f", "value": "T1EC8533915E6253BBCEC58DF31D83F28BA1B4B31F30E2866E962C623C46BE56607530", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736569687, "uuid": "691bfb10-7092-4785-a4eb-abb2d7b40ee7", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736569687, "uuid": "722727c7-49a5-4a68-9be8-ca08f9e11e6e", "value": "49152:l9W9vwhQTHouTUTC/6tkO7F8wG28MSoZvw6qEOYQzo8Q8p7:lLhQGCSF8wG28MrMEHQzTQ0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736569687, "uuid": "07d970fe-a527-4da0-9bed-e51ba30942ac", "value": 1735680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736569687, "uuid": "6f55534a-ddf4-4abe-b217-666014752caf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77811c17-cfd4-11ef-afe5-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1736569691, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736569691, "uuid": "677f8a73-f4c1-43fb-9191-3afcd9c6bb0c", "comment": "Malware payload (Socks5Systemz)", "value": "e987ac79ef7353dff0beed6d10581b88", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736569691, "uuid": "39c7f4d5-4e66-457c-b6c4-e59e7494dfe2", "comment": "Malware payload (Socks5Systemz)", "value": "1e0b134ebb151dba82ec67921f3851283becd95863602ed128f24cf6aedc6a9b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736569691, "uuid": "edcc29b0-2d77-4d80-8cde-804982ef5dff", "value": "T185E5331996D8883AE0E5D0B72E0A11F852A37FB01635E354389E8D495BBF37E35463", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736569691, "uuid": "8e2c5063-9178-49ec-aad1-c2c4afb9c1b0", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736569691, "uuid": "210def21-4bae-4d4f-90e6-90141ee8c026", "value": "98304:MPpsABbRY3AyerUOGmnCfjf37AG8xaVNdJc/F5+9:Q++bUcrUOGgqfrAvaVNdK/F4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736569691, "uuid": "bd9e5dff-1317-49d8-9f42-37c35b1de3d4", "value": 3294826, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736569691, "uuid": "e3811c1d-b398-4598-933b-c2a7305b1e73", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "30b0213a-cfd5-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736570002, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736570002, "uuid": "72605bc7-494e-434a-8e63-8a010d09149f", "comment": "Malware payload", "value": "f144fa5ed4bfb600dfa0ea278b1bbe60", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736570002, "uuid": "c07e0b47-1691-4b00-b3d2-1264f3eff7ee", "comment": "Malware payload", "value": "f5db4c8e3df133dc894567936728e4ced92c8b621b61ec7373bcf705d253a449", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736570002, "uuid": "030e6126-e68e-4a98-a21c-eed5ca2a0cf8", "value": "T1937412F7EC687D61DD0249F947A960B00C8EEFDF9DBF0A65D5EB3964288021238F46", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736570002, "uuid": "6d1c21e4-cd35-414a-a551-087de898a5fc", "value": "6144:iCS5OPlA6hz0d+2eD7ssPnm6hz0r7/25ndVwQBlyJPN2JLgT:G6u4LD7bg/SOA4JPN2xgT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736570002, "uuid": "1136a0d0-9768-4460-b7ce-52420c37577b", "value": 362498, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736570002, "uuid": "22786d86-a3cf-4a52-a130-71a0b3cd397e", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66d7ad10-cfd5-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736570093, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736570093, "uuid": "699a9d16-68c6-4014-8184-e99cc5ab9b1c", "comment": "Malware payload", "value": "741a055aed40aa2afa0b8a704e85254f", "object_relation": "md5", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736570093, "uuid": "aaa104eb-731b-4d0b-8c28-040d4f1da153", "comment": "Malware payload", "value": "189dfabc8185899b0f71fcf992349f37c1f7fa9c17fb5cddbcfb6e9a44b707fe", "object_relation": "sha256", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736570093, "uuid": "0f33728a-9be3-4f73-aa29-f2bf99f6c868", "value": "T1CCE2E0A04B2056B3C2A2063BE7BCC742131B1BF9A19934B5A0659604CE33335DBB9B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736570093, "uuid": "4cf95e66-a8fe-4a88-98fb-4271757654f9", "value": "768:m0Z83lIJ09Nxe8rD/FeN9AXaxmLjfX6WQdFELxSk3URR:G3lIJJ4/FeX2TLjSWQgIR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736570093, "uuid": "e1e2df6d-9a80-44a1-8c62-6be83c03dce8", "value": 33588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736570093, "uuid": "44a6dc6d-2b3e-477d-878a-5136cfa455ff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "faa34117-cfd8-11ef-afe5-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1736571629, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736571629, "uuid": "5dec04cb-625a-49ce-aaf4-f9cc40f6e79d", "comment": "Malware payload (CredentialFlusher)", "value": "5838ecf7c93af05f1910a499447e1fb4", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736571629, "uuid": "c4432c8c-9f11-48b6-8a36-1fe9ce1544ab", "comment": "Malware payload (CredentialFlusher)", "value": "0f70cf632b4a8db20283b725a0006acfa6e743bffb823a46835d5dda26d380d1", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736571629, "uuid": "b419ca7f-73de-4f1d-b386-47c7b8544647", "value": "T1C5259E0273D1C062FFAB92334F5AF6515BBC69260123A62F13981DB9BD701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736571629, "uuid": "327ac2af-a5d3-4112-a14d-fbaa61ac1397", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736571629, "uuid": "a208e27b-f9a6-4c1b-aa29-50cbc797b485", "value": "24576:jqDEvCTbMWu7rQYlBQcBiT6rprG8a2L7L:jTvC/MTQYxsWR7a2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736571629, "uuid": "a2ffc86b-f58b-48ee-82c6-e44499af7342", "value": 968192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736571629, "uuid": "b8dcd14a-154d-4f61-8b98-f3e8de8558f3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de8b1795-cfda-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736572441, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736572441, "uuid": "1814035b-b198-41a9-859f-20970e14c352", "comment": "Malware payload", "value": "a792fac45d26941ea39fc89a85fb3a12", "object_relation": "md5", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736572441, "uuid": "c9168428-017f-4085-9a12-22a0d48e387c", "comment": "Malware payload", "value": "d82ce3931f5c869fb67544eb8eab3762cb311d2b803874d0fc24c1311ff50d97", "object_relation": "sha256", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736572441, "uuid": "d282d9fd-7ee2-4ce3-9fcd-99ce5825e088", "value": "T1A393B52B7B134F63C0C610B152E30632B8B9EF5934BC8697A8E07D9D6F3698431567", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736572441, "uuid": "ade14d7f-3405-46a3-865c-a375f7258021", "value": "768:dTgpAq3C4CxiCqA/Yn0ytUcVbmK4GPzdhp2lnFAj+2ZYO+N95VDzBftN095Z1t1t:C+X2P0KBk1FArUN95lpb0tMd8Ut6sCsy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736572441, "uuid": "56f28c6d-9c1d-405e-8e47-fec9984c291d", "value": 89416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736572441, "uuid": "c3bef5a6-c579-43d8-8d0d-4f84974826b3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed93c861-cfda-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736572466, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736572466, "uuid": "4b6b091c-c87c-49db-97d6-0f0c5c2fd907", "comment": "Malware payload", "value": "edbdf4c151a4c79861f4493721aeaa0d", "object_relation": "md5", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736572466, "uuid": "bbc714c7-0379-475d-9d62-7db808186488", "comment": "Malware payload", "value": "14211fe96f3c11f41d8f1cc6d98a2fb7d079a7f39ba7ef4a434caf37daf0f04e", "object_relation": "sha256", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736572466, "uuid": "f9d5cb92-c5c6-445a-ab01-b9731e6eb538", "value": "T15E03E016EA8D9371CCE54C77DF2A3782F5586F98E6DA31312374096E8B7FA42145CC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736572466, "uuid": "621614c3-cd2f-4c17-9a51-32738eb95f51", "value": "768:8vnVQkZ9FTHD5viKPuaO/Wbvh+OsUSX027HSsMDoBLU4o90+O77fYgq3U7e:8/Vv7tviYOC4OsfGDoNUAnfY0e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736572466, "uuid": "5d0fe8a6-00da-4dc6-b39a-79a844bb45e3", "value": 38608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736572466, "uuid": "06f9fc79-d577-42e4-9fe0-8017cd682882", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ebec5dd-c405-11ef-afe5-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1736573050, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736573050, "uuid": "e1b0ef47-3bcf-4f15-ada8-81bce051fe6e", "comment": "Malware payload (Kaiji)", "value": "e6ef7bd0b355ee2f5810ab2a955c2066", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736573050, "uuid": "476a1207-e566-4348-884d-47b648db6afe", "comment": "Malware payload (Kaiji)", "value": "358ae8f9b931fd7ada8c54e558e16f2db7400f85a0c6215f1ff36f6c13ea300f", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736573050, "uuid": "77c5bd87-8b8a-424e-8752-612de2147283", "value": "T12D46F705AD842BE7C42C4F7495E6CD6522B01E140AF14B3A26A5FFE9BCB62747F039", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736573050, "uuid": "0f91ef62-99b7-4884-aec5-e9e3324c5a1e", "value": "49152:YzYDt2QsZfbpswDWv/96InSJQ3JljeVOl:Qsw6FnoAH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736573050, "uuid": "30a8e182-c5b5-41c4-8161-0b3447c33712", "value": 5767168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736573050, "uuid": "c2e610f1-de06-45ed-a5f8-870771301312", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "55164f80-cfdd-11ef-afe5-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736573499, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736573499, "uuid": "5af655b1-3992-4bfc-a11f-e970c714945c", "comment": "Malware payload (Gafgyt)", "value": "1135868ad5966792fdcca09a699dce3f", "object_relation": "md5", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736573499, "uuid": "76f92efa-9707-4145-be0f-0f16596a3ca6", "comment": "Malware payload (Gafgyt)", "value": "e8bcf1d9ca8111c004626d24e67fc8a1db2d9899bc4148320d5e3fca1736b442", "object_relation": "sha256", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736573499, "uuid": "09fda03a-07cc-4012-8d10-2972b3f1c383", "value": "T1EDF2D0EFE35AE5FCD43D5DB0926C55C0E93DB80BE20907A7098431BAD970A884E34B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736573499, "uuid": "ad7e432c-a9c9-4d9f-a777-3859f980baf0", "value": "768:QDqXoNqWuptMmK5M8ULkpNN+esCL4Kd5OQZUOLRmuol1vYEd49Ssv9sPo:v2QTBL6+YLx8Qo3AZFuo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736573499, "uuid": "9e882b8d-f3b4-469d-8a28-6b34467ca327", "value": 35840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736573499, "uuid": "4fe132d3-8452-4dd3-ae3c-ff8ca6cfd65f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7510b26c-cfdd-11ef-afe5-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736573553, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736573553, "uuid": "0ffe0846-5bae-4abe-befe-f14dca1cc010", "comment": "Malware payload (Gafgyt)", "value": "616c5deb08b8fe0317ff0a65e8c502aa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "PercXSwarm", "colour": "#74596f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736573553, "uuid": "97cccbd7-90d9-46dd-8b56-f804b373c753", "comment": "Malware payload (Gafgyt)", "value": "d2f17797175d0ee304e7ae765ddb929dc0d715e8719db773ba49b6f81bc6e7a6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "PercXSwarm", "colour": "#74596f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736573553, "uuid": "9cc34968-3731-4bc5-98c0-390663961f94", "value": "T1FD733A02AB81CBB3D08316B606A79B210232F97A5E5B9F15F35D7CF49B150C87267B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736573553, "uuid": "41d5ebd0-d943-4e28-8ce5-7573220ce10e", "value": "1536:fQ/CnToULUWynmqPoh3a8QsESNIp5vtnyChVVql4TgkDjqmbdZ89UxTumLI2VOCF:fQoUULUWbU5vJ5hKKTv5w9OumU2VOCbp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736573553, "uuid": "bcb8762e-c858-4279-82a2-b198c18de0a2", "value": 73500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736573553, "uuid": "88863982-3e31-4096-a00d-981fb508aded", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90db4d98-cfdf-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736574458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736574458, "uuid": "4d5af007-62c9-4665-8a97-9ada2ae9fd3d", "comment": "Malware payload", "value": "e4d55eae5675a512892ad191e36a5f20", "object_relation": "md5", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736574458, "uuid": "02d392af-3e63-4724-b347-b0dbaf839f3a", "comment": "Malware payload", "value": "f934a8404562686e617283e32c37f30f83aa27994bc0dfe0fe61012376f421fd", "object_relation": "sha256", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736574458, "uuid": "b068e0e9-42c9-44fd-bdd8-c4dfb635ed5c", "value": "T162E2D156EA475DE39BA50C31BC9A0900539E0BFCD45A3E25F63C4B39FEF981207768", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736574458, "uuid": "82246ab3-9277-4d0b-b5fd-d21b96cb5fc0", "value": "768:7cWIGPYj//EaeqheWmJWjBUlNxa3w9v1Gu3Uj:78R7Ebujexa3w9vk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736574458, "uuid": "88a1e181-aeca-46e4-ab0e-46e4da2cf1d3", "value": 32088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736574458, "uuid": "53794e3a-e2cd-4a4b-93e5-9dddd7baa868", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6aee95da-cfe0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736574824, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736574824, "uuid": "b074b0c8-f6d8-4ed4-9ce0-1117f86a646e", "comment": "Malware payload", "value": "341269e2f627694b67c9d7abd07ed430", "object_relation": "md5", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736574824, "uuid": "a5829317-9b01-4f55-ab98-04e46760c8d8", "comment": "Malware payload", "value": "9c1f30e6fa0046e86606378ca020d487f0d50f1c25c04cff57a209debd760465", "object_relation": "sha256", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736574824, "uuid": "ef363acc-87b8-4a95-a851-18e040df3db6", "value": "T1A1E2E134C4F8AFD1C09D50FC351E6D0A52706B2696CA5332E7D8A47F8B26E9B795C2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736574824, "uuid": "51bd9dac-536c-42d8-a812-3fad12245889", "value": "768:HyzmCa1b14OqUAldbIvqMVV0dw72ZM+S4KZs2RD0hXBwDU6nbcuyD7UryqM:SqJb140wsSMVad02M3R08U6nouy8mqM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736574824, "uuid": "9072acb9-ce01-454a-8a67-94209bceab04", "value": 33164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736574824, "uuid": "97a262a5-f761-4029-b2e8-1319b5e4d75b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e835a70c-cfd7-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736574901, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736574901, "uuid": "1058c7d7-9e71-4c2a-906f-8c0de6833e67", "comment": "Malware payload", "value": "910b2e5b615367a6a0284dc131253238", "object_relation": "md5", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736574901, "uuid": "6a6c4076-cccf-4bf5-a08c-7ac103b9edc6", "comment": "Malware payload", "value": "4541d10d484d830c108e90e8a048835a6bd714ad61f3ae9257759f08b6004d93", "object_relation": "sha256", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736574901, "uuid": "f14ada28-d067-47b0-bd01-5b9397eec7ba", "value": "T1562633BA3EFE4884ED5858B6C61392C426C3DB2B3BF6C645D31692217D46117632FB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736574901, "uuid": "4253ecac-af9c-4eb4-94a5-83702cd20c9b", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736574901, "uuid": "e0245b88-72a3-4053-be89-cf806814a884", "value": "98304:9HAB9WQ/U/Q5PvIqsIgXsMYmMsuSqziRjGkYgO1xpUBktQD:95/cPvIqpMs9Sai+gOXpUS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736574901, "uuid": "59b445ca-7506-4254-b9ce-4cc2972d59a4", "value": 4465152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736574901, "uuid": "8a53d5b2-2675-44be-93e4-5e0dc47d0e13", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3b6a0e4-cfe0-11ef-afe5-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736574973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736574973, "uuid": "f1360259-ebe5-4498-a968-7e57c1d78abf", "comment": "Malware payload (Gafgyt)", "value": "e928409c3573a3836e2dedc049594da2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "PercXSwarm", "colour": "#74596f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736574973, "uuid": "0e810148-96cf-4302-affa-c03788495586", "comment": "Malware payload (Gafgyt)", "value": "2241949f307e5826b6627854530691565168f99891a78f98a71b86ac746abe88", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "PercXSwarm", "colour": "#74596f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736574973, "uuid": "7ad3d2ca-f25b-4a91-89f5-5482464bb4f3", "value": "T1A5733A47A9619FB7C096AEB526E74A300713B8555F0B1B89713CEAF8074F8CDB80E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736574973, "uuid": "ac30ee91-2606-4868-95f5-a1a8fe0f1c26", "value": "1536:GvJBYQHflAKr4L1OULnR/mEP3pCkFkojCmj9VqYLe8f26e:a+QHNHrDULnFvprazmj9VqYq8f26e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736574973, "uuid": "c820443f-4d01-4694-a7ee-ef0f2b621910", "value": 78202, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736574973, "uuid": "bdd1edda-fd86-4303-bb27-3ea694ae0788", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "293cf6b8-cfe2-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736575573, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736575573, "uuid": "dfa67aed-f315-46a6-a7df-602e4bc4e850", "comment": "Malware payload", "value": "a40e4a8aaf476b3d9997d05489f87c2a", "object_relation": "md5", "Tag": [ { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736575573, "uuid": "ca7e9fd9-4c6e-4ffd-91ac-3d3aed13f9ce", "comment": "Malware payload", "value": "df60b74ff96bb320d1cf8d1a511c56bae2ca8d94ebb6566eca7b51c3521c0171", "object_relation": "sha256", "Tag": [ { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736575573, "uuid": "a6c7cb7d-5d80-4091-8ca9-ed19061316ba", "value": "T157B44AF4FB50B7F8D4001C72C2654A5848B97B97F6266B03FDA19E7922628BC5F813", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736575573, "uuid": "31b5b660-d8c5-4cb0-84a0-bcb9610fff0d", "value": "19d4e66d725c89ba6712b82bebc8196d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736575573, "uuid": "f283b3a8-47a1-4db0-bdf6-83a87f39f9f6", "value": "6144:GpoMkequERu8qQ1fjYMMW9eKZH+IdISTUL24qL9cPKcPzR2RP6lZv:oDR+u8pfjYMMWNvdhUSByFPztv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736575573, "uuid": "8352c2ed-ae8a-45a2-b244-935e7c24025c", "value": 502784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736575573, "uuid": "c402bd3c-b983-4579-87be-181914cea610", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44d442d6-cfe2-11ef-afe5-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1736575619, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736575619, "uuid": "a52b0015-4fe0-4639-9596-acea85701ab6", "comment": "Malware payload (Stealc)", "value": "f41dfd98d7f8304859ecb4feb2af914b", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736575619, "uuid": "e119fdeb-dca5-4530-8b8a-4f2ad720b5d0", "comment": "Malware payload (Stealc)", "value": "95fcbefdb108b4d18062c436acdd24302da8ad64e48f1883972c892c9ac8b817", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736575619, "uuid": "242f8253-66b9-4c8d-945d-2fb80f18d033", "value": "T17A8533F90CF219F3E64C92F92A6E7166F5146FA0726FA9041B00833168FB792D1DA5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736575619, "uuid": "3765762b-a6c5-4767-9e6b-e74e2cbadfe8", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736575619, "uuid": "0b34b764-c53c-4900-86ce-18cfaac1d6c4", "value": "49152:8uwuNGMBcriL8fV/kzpPl5nfKhUo5Vq1I/:gMB6c8fV/kpP3fjo34", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736575619, "uuid": "b1be7cc7-b92f-4ca3-b178-d0a2fe2e6890", "value": 1778688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736575619, "uuid": "dcb95b1b-d7e1-4eda-bc10-8c528099ece7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0dcaf909-cfe3-11ef-afe5-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736575956, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736575956, "uuid": "0e09967d-e73c-4aa4-9387-36f76bb50f97", "comment": "Malware payload (Gafgyt)", "value": "f9b57241cbb2370de87bf90b6fc0491e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "PercXSwarm", "colour": "#74596f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736575956, "uuid": "88e98f6e-a542-4ae7-b8df-c281976e3df7", "comment": "Malware payload (Gafgyt)", "value": "e3acca531416ed3ef28834e78c70ffcbdd6b3a3cf69025f0585db47749ee0469", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "PercXSwarm", "colour": "#74596f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736575956, "uuid": "ed4d429d-61f7-4e5a-b4e1-5d7e8c2e411d", "value": "T19F833A43B71D0B43C49B6AF12DF727F18769F9A117A76180A10EBFD44732AB02512F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736575956, "uuid": "2a19ef44-d1bb-41d4-ae1d-7a3954485556", "value": "1536:6Q9IzsVs7BAQg63cw33AMDRAHLkK9SxEmQ9VqXjtWf2Xe:6m3Knvcw33faZUxEmQ9VqXBWf2Xe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736575956, "uuid": "06c1bc20-7434-4df5-a402-64e13e7267fd", "value": 85085, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736575956, "uuid": "2eec2a93-4776-4ea4-a53f-87c643f33a87", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16525702-cfe3-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736575971, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736575971, "uuid": "cb0ef864-0fc6-425e-8ec8-ee46a6e880d5", "comment": "Malware payload", "value": "e8f5dec5324ed6c136db7faa1761fe59", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736575971, "uuid": "16346ef7-3dca-439e-add0-284fba884865", "comment": "Malware payload", "value": "7c24913cfe56e1f46564cae3ab820f8878ed3c915a34de5edff6d11050ffca06", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736575971, "uuid": "e804703f-36d5-40a9-b846-a4f97e14ec4b", "value": "T1608533A30241BE2BCB1D9D3C094F34C5A7A587BDC238BA7EBD034A4E7512F965413D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736575971, "uuid": "fa3fe2dc-8742-4a76-966b-f053c395f402", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736575971, "uuid": "190d6fd9-9f9c-44ec-9a09-8e03f95b92d0", "value": "49152:NwFNgZgo7WRf9vu9634HKxsP4f1vL1004:NwFqPyRf9vu9I1D103", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736575971, "uuid": "d556f092-71de-4715-9903-c87e82953443", "value": 1871872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736575971, "uuid": "224b0421-a0dd-416a-8b84-1ca1b8c1729d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50d710c4-cfe3-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736576069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736576069, "uuid": "1a369f27-9f84-442f-a204-3ae6d31c1bc2", "comment": "Malware payload", "value": "87101c37e8b984cd5dc1d373009ca0be", "object_relation": "md5", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736576069, "uuid": "05223e82-b0a2-40ba-a7c7-88f76c384019", "comment": "Malware payload", "value": "6bf0c84d6ff3dba79352cd625d7ebe9123f9a4aab93ecea93265c3f2181718e9", "object_relation": "sha256", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736576069, "uuid": "714c76ac-6dfb-4aea-8a77-592552d5c592", "value": "T11D13F120B608A6E5F5E05C7BF4788181920F1E36F7E5713B3B2549171EE220627FC2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736576069, "uuid": "c1e35d79-f416-4c84-a46d-141dce796f2d", "value": "768:FqTmgYJmINIoybwVYtlZ4XbfpU76LR7a1EG1qboF72H8JSy0cXrlq3U7tml:M5Y9J92v4rfy76d7qPsu72cJSy0cX1tE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736576069, "uuid": "56df7930-e79a-4513-b9b8-f923893957da", "value": 43528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736576069, "uuid": "7d93a1c7-e057-4acf-a0b6-a4367393b4ca", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53ff8f8d-cfe3-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736576074, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736576074, "uuid": "7020cc69-d384-40fe-a5e0-e5111d9e12b8", "comment": "Malware payload", "value": "68984bfc5808fd9bc2d2a712d1cee2d6", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736576074, "uuid": "118685c9-d9a4-413c-b13a-6aa104749000", "comment": "Malware payload", "value": "19512457e6a13ac9ccd45c325cd0877b58f5beb3b60270935124d75552030711", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736576074, "uuid": "5c2712a3-6e5b-4f87-85fe-4c63a9603824", "value": "T134E529A37C8971DBD88A1BB4D03BDDA2E91D46F9071518C3B82D78BE6D73CC205A6C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736576074, "uuid": "c1c96a29-a053-490e-b184-13d0f59f9cf4", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736576074, "uuid": "6004455e-0a56-48a0-a0e7-16e6cf3979e3", "value": "49152:l0Jx38V3qGGo9UrjkFpmKqRT0Qjs34oZ83jJ:l0Jx38V39Go9UrgDmK4QQw3hZ83", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736576074, "uuid": "f542286f-c134-4e14-ae3f-c4d00b035783", "value": 3191808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736576074, "uuid": "10dc8ef0-398b-4dbf-8c55-456ebdce0780", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3482e265-cfe4-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736576451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736576451, "uuid": "71932156-461b-4cbc-b678-b79f38b8c23b", "comment": "Malware payload (Mirai)", "value": "5c32a496c39cc77b0f6d12018f9cfec9", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736576451, "uuid": "bab9cbb3-cafc-47c1-9550-cf87bbb62da6", "comment": "Malware payload (Mirai)", "value": "0a0293837b244face14763c163a4fb98ec070093716588de40c3c42324bb70cd", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736576451, "uuid": "0397bc07-45b3-43de-bc5f-607fbb55f23f", "value": "T1C193FA86F881AA11C6C046B7BD2F055E330667A8E2DE7353DD241B64778B95F0F27A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736576451, "uuid": "da8db562-bec0-4ddc-a2c8-715c20eb11f1", "value": "1536:O/nqQ4DapMaQUk2Tfl7aYUz2lAoNc6igfR+NMhiQX88UGfdinKzSAyUX0v7p6dJ:07tEYUz2fd88UGf4XAyUX0v7p6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736576451, "uuid": "f573062d-642d-4707-93cf-709669cfb76e", "value": 92028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736576451, "uuid": "cc35f733-e62a-4541-85bb-b285f613c9e1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed254315-cfe4-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736576760, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736576760, "uuid": "c28b3e77-1930-4b4e-af9d-07e52aa20197", "comment": "Malware payload (Mirai)", "value": "2d6e25191d2316db52a9e439474bdc70", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736576760, "uuid": "7a3aa32d-3fd1-4c05-8795-f4ddb8c2c3d9", "comment": "Malware payload (Mirai)", "value": "9d2e09d54b952ad953f59fde010b1a8d4533d75bcdf4e18baf2d5ac7522343fd", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736576760, "uuid": "1340dd13-6f22-41f0-ac47-de1661319be9", "value": "T12D93FA86F881AA11C6C042B7BD2F055E330667A8E2DE7353DD241B64778B95F0F27A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736576760, "uuid": "e9611bb1-bfdf-43d6-97ae-5341e52c5408", "value": "1536:e/nqQ4DapMiQUk2Tfl7aYECylAA41c6mgfR+lMhikhX8QUGjdinKeSAyUX0v7p6X:kTtEYECyHYF8QUGj4yAyUX0v7p6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736576760, "uuid": "952aa2e4-66da-45e7-88a8-067ca4503b1d", "value": 92028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736576760, "uuid": "5f5d67de-2db1-41b2-871d-71c3ff387ebc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6192a87d-cfe5-11ef-afe5-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736576956, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736576956, "uuid": "54fb6424-f921-4316-ad54-afff27159ae7", "comment": "Malware payload (Gafgyt)", "value": "6a55ead8eb2698f87fb09573d104d89f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "PercXSwarm", "colour": "#74596f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736576956, "uuid": "18fde32a-93b8-4544-adf5-6a80f7770fe7", "comment": "Malware payload (Gafgyt)", "value": "68da537f746785385928f5d3d12168366d875eec37ceb7ee279b73171c952854", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "PercXSwarm", "colour": "#74596f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736576956, "uuid": "6a67177d-a6d3-41ec-bfde-ca6b2c844cb4", "value": "T15DB3C617AB618FB7C85FCE330AAA450120CDE55612E96B2FB2B4D92CE74B94F08D3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736576956, "uuid": "0e50daaa-0843-4fb7-857f-7afaac84bdaf", "value": "1536:/LeTEl+xRnSMOEr9ZTun5ATI3fMgHfCRDFqUmkiSFxfC7xbXe:/ISZEr9f6fMJjqUmkiSFxfKxbXe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736576956, "uuid": "1b2474b2-d9f2-4503-aced-15f95408efc8", "value": 113364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736576956, "uuid": "8500d065-fa2a-47dd-a42f-eb79178bfc9e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d4dbc70-cfe5-11ef-afe5-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1736576959, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736576959, "uuid": "36e4e6bc-c020-45f4-bf68-77d125ee403e", "comment": "Malware payload (GCleaner)", "value": "dfa6afbb1a327845a9cbc90369b97c83", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Nymaim", "colour": "#9738dc", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736576959, "uuid": "00442d6b-6f65-46ef-8e27-61635cae3b50", "comment": "Malware payload (GCleaner)", "value": "f71ba702ffee325caf7268958f4770527958aedb0f64838265da8dbfc2586765", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Nymaim", "colour": "#9738dc", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736576959, "uuid": "07ea62e5-f318-40a5-9d3b-3b378222de5e", "value": "T100953395A3A3E768C44F9FF13E377620759DCB51E48E90B953410EFC241AB22AADB5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736576959, "uuid": "5bc01623-5d86-4d36-b326-365896996da7", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736576959, "uuid": "5929d6f3-7aea-4dd9-ae55-8258623a0148", "value": "49152:3Ff8g52HCIDXtg9wGo1GLNtcYp9e9B0Wuayp3I4:VfTYCIDXe9wj1xAe9B0v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736576959, "uuid": "acf01d4b-7606-4dd5-83e0-739461e8891b", "value": 1917952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736576959, "uuid": "7fec34db-1672-49c6-8900-22b7b77d028d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "878c8b8e-cfe6-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736577449, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736577449, "uuid": "bd02f7be-d3cf-4f5c-9a01-f6646f6ab6e1", "comment": "Malware payload (Mirai)", "value": "8a4a9878c51f015b30a0af880041f0e5", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736577449, "uuid": "cd4117b0-076c-4171-bf27-104b0f2560be", "comment": "Malware payload (Mirai)", "value": "9bb3e85491646faf1935889fd6e0070a426e00992866d43ae6177345aefe0f48", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736577449, "uuid": "eb1b3632-a2e3-411f-9399-f250fa61e2fe", "value": "T100C3C71BBB620FFBE81ECD3B04A8174534DCAB1621A97B357538D824FA4A54B47D38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736577449, "uuid": "fe5b1999-114e-4b59-a1c0-54e83b82e74e", "value": "3072:peVncToNXQ5KTFjwq+qFXd4B9ku8hAyUX0v7p68:WEuj+KXd4B+hAyUX0v7p68", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736577449, "uuid": "aa57a7df-8251-4950-b1da-d3bf328eb906", "value": 122172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736577449, "uuid": "733d324b-6306-49b3-8af4-f60eeef3f286", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b05d5026-cfe6-11ef-afe5-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736577518, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736577518, "uuid": "a801217a-c42a-4702-a818-c8f07e648e65", "comment": "Malware payload (Gafgyt)", "value": "dde2d17a7e2be0e4515e539b6f41db1f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "PercXSwarm", "colour": "#74596f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736577518, "uuid": "8f96fe47-a654-4596-9b8b-18e7531b0f90", "comment": "Malware payload (Gafgyt)", "value": "ef70ae977d084090e1e6190027847b4b8faf783e7d4b30d000f71abcc9ada345", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "PercXSwarm", "colour": "#74596f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736577518, "uuid": "955bf2b4-be21-447e-86ef-956758cccd4a", "value": "T1F4931841F9408B27C2D237BAE78F435D77366A54A7DB33016A356EB42BC27D82E395", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736577518, "uuid": "63c5d555-acb6-4557-82f0-f1ecca3a4832", "value": "1536:EkN/XiFPxOptNjJfisayIBH544x6O5/DPpsNQ8YJmREqQ4b/X7XSee:yFZ8tB2ys44FDPpZmREqQ4bv7XSee", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736577518, "uuid": "7370ef2a-5b89-4d53-8619-1598dd934837", "value": 92441, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736577518, "uuid": "8da5eff8-69f3-4708-bb42-844e56716d70", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7a632fb-cfe6-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736577530, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736577530, "uuid": "d5d3d337-5cd1-4e75-9173-90fcf822715c", "comment": "Malware payload", "value": "40e731fa340d706a36ee0068ec537f4c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ursnif", "colour": "#d9abe9", "exportable": true, "hide_tag": false }, { "name": "virus", "colour": "#653c2a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736577530, "uuid": "feccbb69-a4f1-4ff3-8038-914f8a7b3ad4", "comment": "Malware payload", "value": "1d2a753622829bafeb063a24d09abb79af4b4f0eb66077e4556513793b1e3e9f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ursnif", "colour": "#d9abe9", "exportable": true, "hide_tag": false }, { "name": "virus", "colour": "#653c2a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736577530, "uuid": "d7bd33e2-4c91-42bb-9d69-2a892cc1a1fa", "value": "T173863322C1B01A5EDCB88FF480B69BAE6C51BC243C75F8ED4F1AB6AD43B75C2154DA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736577530, "uuid": "8202272b-7784-4462-9f97-1c01b2086fce", "value": "41adfe78e87ab57f0b8551bbee9449a5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736577530, "uuid": "43cdbd35-e7da-468d-a296-b0fc20cfcf46", "value": "196608:QjQYZgaHg+WvcGUJgcqmMoy1MgIs1jII+AxGyCKo:QsbaA+acGU+r9jIBAxGyC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736577530, "uuid": "1e48d960-6c1b-4d48-b58a-3b8442ddbaf6", "value": 8218112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736577530, "uuid": "5ac71fe0-7b23-4bf9-b3c9-534377824666", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9de82a3-cfe6-11ef-afe5-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736577560, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736577560, "uuid": "f0c823be-97f1-4014-aaa2-71ec948334a6", "comment": "Malware payload (Gafgyt)", "value": "6dbe16a56f1d9624489bf70b14fa865a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "PercXSwarm", "colour": "#74596f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736577560, "uuid": "1a8b6d10-bba0-491c-93ee-a8dcbb694c11", "comment": "Malware payload (Gafgyt)", "value": "fa329c7d4f7308c9814ccf868acc2f5da96ad6da6da8fa59fead8a18031dea9f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "PercXSwarm", "colour": "#74596f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736577560, "uuid": "29561bd1-d70e-42f1-8113-444f43c7044c", "value": "T191930892F900EFB7F40AD77644D34B24B230FBA24E531662731779A6AE322D53826F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736577560, "uuid": "dcaa9051-1651-4b4f-b864-5072591a64a4", "value": "1536:NC7A+dTLWr85yJYG3xIfQm/fUNV+z9IiOBnyaLg8ahs44P3STmQ9VqXjewf2Le:knLWiyf3oT3miOBnyaL5aKP2mQ9VqXy+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736577560, "uuid": "898aed71-2623-4278-89c3-12baedfd6a11", "value": 91419, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736577560, "uuid": "e248a449-2d99-498d-b41e-63ae7bddb06d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d71f3132-cfe6-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736577583, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736577583, "uuid": "910a487e-3cbe-46a5-9f3f-144d9e863435", "comment": "Malware payload", "value": "53878f133ef855683322cca19a445962", "object_relation": "md5", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736577583, "uuid": "6ccba0b4-ed5f-4016-a664-47627c8a7674", "comment": "Malware payload", "value": "5987bbf5fde6aaac3aaf66ac556ee0ffeddfa75e536fd0590b170c3eb9ff8c96", "object_relation": "sha256", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736577583, "uuid": "e83f12bc-f54f-43b1-a99f-4e56484a144c", "value": "T19E2633692E59B7ACC28D01FD794B85828E6627FD45864362306A037FFDF2D2E6D4E0", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736577583, "uuid": "cca0d3a5-5eda-4e8c-b67a-498c0e721937", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736577583, "uuid": "51a173e8-14c9-4557-8830-a5e27490fe96", "value": "98304:rRDI1dHgsfLsACe1B2zrZ10ZTp1yKJDeH7Xia0j:rRD3eD2zrZmtrhaW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736577583, "uuid": "e1df1e03-b87b-46e7-a8f1-38dba349ef27", "value": 4445184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736577583, "uuid": "a6d228d8-e613-4d47-b87d-c6090e4e5234", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37b8656d-cfe7-11ef-afe5-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1736577745, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736577745, "uuid": "7df55ced-dca2-4352-acc3-363db11e790d", "comment": "Malware payload (Socks5Systemz)", "value": "6ee098f6988a96b08c2a221d1afbe1b6", "object_relation": "md5", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736577745, "uuid": "27ee80f0-d72c-4d70-a4ba-d6a2b315045d", "comment": "Malware payload (Socks5Systemz)", "value": "004ecdd253bf06a92c929aa52a42329af645c01f2d9498628d61b7acc5f1479f", "object_relation": "sha256", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736577745, "uuid": "2db1562c-b2d0-4608-a7c7-8f0702d06387", "value": "T113E53345BDD384B6C224E47F2CAE1406D9E2FA193D7738D4921C092D1E6E2DA86FF6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736577745, "uuid": "f71ffff7-76be-4bd7-b59a-6764b50d5222", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736577745, "uuid": "dd2fdb8c-8897-49cc-9ab7-c14b4983cacd", "value": "98304:MXrkO8C/7QANc2bATlc8M9wyZ9fHkxtQU9T03e9:QkTC/UZsAm8M9bZ9f+l0c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736577745, "uuid": "12ffc83d-78a9-4c5e-81c1-5b45a60a5553", "value": 3299917, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736577745, "uuid": "0db65af0-89fd-4b3c-be72-1dae031758c4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "260ce6ac-cfe8-11ef-afe5-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736578144, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736578144, "uuid": "a11496b3-24f0-4bf8-863d-b06c1b441bf6", "comment": "Malware payload (Gafgyt)", "value": "074033f8d86474698c07cc049b2abef9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "PercXSwarm", "colour": "#74596f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736578144, "uuid": "5fe2a57a-b3fd-4fa8-8a85-ea0172cc8eb9", "comment": "Malware payload (Gafgyt)", "value": "d7e692e9b170b43d4608d39f6cd9ea2bebdbd151166f572c65496d0df162beaf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "PercXSwarm", "colour": "#74596f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736578144, "uuid": "19f30939-9221-4e92-814d-c6b5488f4dc7", "value": "T11B734B02EA52C6B3D8830BF602AB97694631F96A1E1B8F99F31C7CF4AB134C871177", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736578144, "uuid": "95776677-3d9c-4460-8771-da323f6314e9", "value": "1536:1/PKCSudWp8QqCorO7ph6F9Zu23B7oWt8NsEAbtmLI2VOCjXUfJRk:YCS52/CorONh6Zh1OuntmU2VOCbUfJRk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736578144, "uuid": "5b368adf-885e-473a-8363-f0bed64266d2", "value": 76668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736578144, "uuid": "f7b9ec6d-2ee4-4d3c-8472-fda54b965f86", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "380acff3-cfe8-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736578175, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736578175, "uuid": "619ac7fc-b2e3-4e96-ad1f-29cdafbf3412", "comment": "Malware payload (Mirai)", "value": "3f6058a4cc9e65d5b037e145f1e22477", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736578175, "uuid": "9a88c841-b32e-417c-8dbf-1f8ba8e91f53", "comment": "Malware payload (Mirai)", "value": "f6f3543047421d73a74deaec55d59843d0b0d648569795b8df64bd1de4ffdaeb", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736578175, "uuid": "58b6cd49-8baf-4b31-83cd-da0be45fdbdf", "value": "T1E5931946F980A612C2D256B7BB1F028D37155BA8E2DB33439D340B61B3DFA1F1E276", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736578175, "uuid": "12dfc65d-9cd5-4d35-bc08-78801040c677", "value": "1536:BD/M0UonmURSm7V2ou3cID0KiCe4bZGGleEFw/epjpCnjeSAyUX0v7p6dE:O0Tt0m7Va3Vif49LJFw/epjYXAyUX0vA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736578175, "uuid": "0be94062-954f-459b-9095-b8fc18e109a1", "value": 91804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736578175, "uuid": "b8bd72fd-acf9-43f4-b356-58870fa3e86b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ba1af92-cfe8-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736578234, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736578234, "uuid": "91a5fa68-17e4-4a66-a2ba-73d6b4dbeee5", "comment": "Malware payload (Mirai)", "value": "811e7e422705e4cd616037bea24d0a2f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736578234, "uuid": "1f132582-b276-4a00-ad79-c7dc45b520b5", "comment": "Malware payload (Mirai)", "value": "dc233a4be89edaa57ef7e141757f42f0c998f9b14b2e31a729a1cda30d1e70e7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736578234, "uuid": "f5a2472c-0028-4761-8315-28b84137cfc8", "value": "T1A3C3D75D6E164FBDF399873987B78D309218239223B6E680D1ACDD145E603CF680FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736578234, "uuid": "1e3f43a9-9c08-46af-8141-9708f54a39a8", "value": "3072:mk4CLlsUrurbhREfy/FmtHXm6YrydAyUX0v7p6Ji:mjCLlscur/Efy9mtPYedAyUX0v7p6E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736578234, "uuid": "78114216-4a8c-4227-960e-6d7fd6cbe123", "value": 119756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736578234, "uuid": "1552e3c9-65bc-4f9f-82db-0656ef558fc6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0806f6d-cfe8-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736578350, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736578350, "uuid": "381a7065-bdb7-4fba-a650-eca768654ae8", "comment": "Malware payload", "value": "efec2922cd6214351eecef1a9fcdacc8", "object_relation": "md5", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736578350, "uuid": "9e86784c-373f-4605-be9d-bb6742ef25b6", "comment": "Malware payload", "value": "08b9b7469cf772f2b3c74b5e782f6d8767c4327c3e9f2199b80b40fa62c15d0a", "object_relation": "sha256", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736578350, "uuid": "83a44a81-8b09-4cf6-b9b4-29f2322bd22f", "value": "T1F4E2F1B623B4C7ADC5F454FD0C5DB81E9024DACC4A6931E5FEA4931B4D80F686F2E1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736578350, "uuid": "7ac15cd6-9d79-414d-b8be-f25b576f091d", "value": "768:1IpxstS+dlNzTWFPGwCyM6KVIwnJnyiz7qzZnbcuyD7UryqG:1As5jRTyPGcMRVIeYifqlnouy8mqG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736578350, "uuid": "a8d07372-186f-403d-95ad-c1f646c75b76", "value": 32968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736578350, "uuid": "680d9a0c-3d05-4844-ab58-725408790a06", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d91fe065-cfe8-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736578445, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736578445, "uuid": "15e758c2-704d-4a8f-ac7d-8501409e88d8", "comment": "Malware payload", "value": "435b552095502a5e482905e2ff30a0c9", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736578445, "uuid": "6d3b7dc2-e7c8-4aee-91c7-b5fde1fcc76d", "comment": "Malware payload", "value": "ab9c458e9f870f39c5066df3d40b83358e2a84817834974a338d645a657d8e9a", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736578445, "uuid": "f7259022-713e-4a22-bb1b-99b4168e4c2a", "value": "T1DD61F40074735C6A7EE2A88FB17AC50977E5344E1CE19FC1B0ED76BA908DD487A823", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736578445, "uuid": "c461d39b-1767-4f7a-af23-51a3464c841e", "value": "24:sF+QiiibMTgVkttNwK3gV2E+s/qyqF++iiibMPVIV0ttDiKPgVYEks/ky9:ergYsCRTg4ssC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736578445, "uuid": "d097d2a0-0f24-4b6e-bc31-bd9fdb089743", "value": 3427, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736578445, "uuid": "0b4b00c2-db89-47cc-9234-91b47cb9192c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e92e070b-cfe8-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736578472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736578472, "uuid": "6074d7dc-7d28-4ca9-9993-a13379f79965", "comment": "Malware payload", "value": "a8e2226d0412b274cdbd779b266f8585", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "This_exe_triggers_specifically_to_cobaltstrike_c2", "colour": "#e63640", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736578472, "uuid": "1ec00280-1cae-4475-bf4b-eafd29fac879", "comment": "Malware payload", "value": "4754ccc00aff49417cab5d98293c62d28199aa1b35a07db50c696ea1206aa7d7", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "This_exe_triggers_specifically_to_cobaltstrike_c2", "colour": "#e63640", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736578472, "uuid": "38dad93a-19fc-4f51-b088-c30e0f472145", "value": "T1BC34CEDF033EA2AF96407ED4ED93D720A0EB62927FA1B615C311C5F5032B981AC657", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736578472, "uuid": "52878b93-7b19-40d0-9f0b-e5f3137c4602", "value": "6144:K1QHRNf3/dYS+49z8Wo46FzaHaQAXBmOK:fxNvr8W6Fza6QAX4OK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736578472, "uuid": "773d90d1-95ba-4da6-8c94-353cd089b883", "value": 239698, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736578472, "uuid": "2a3156c9-dc11-43c2-b2cc-5d95861b87aa", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "487170a5-cfe9-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736578632, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736578632, "uuid": "9dee2757-0521-4e51-8818-2395b7df07b7", "comment": "Malware payload", "value": "656a9fe74aae5b3827f8f04762b9de72", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736578632, "uuid": "ab49ebe9-1859-47ab-a378-12d9debf05d0", "comment": "Malware payload", "value": "41fdc61db3f70a7b11a4201cfd267ce57f1a871d8dc6614119ca99565b2db88a", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736578632, "uuid": "ec8df0fd-6e90-4430-b798-02a218d12226", "value": "T16147CB8C0EB65EF8F225E01723616BA6E449241FEF453BD8F64D71AC9F04085FB9C6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736578632, "uuid": "e115aa67-7742-467b-b0e8-932b904626e4", "value": "49152:Ubjb0T2gfMtGs+ud5M2Dpd/W3XZTvjpHHplwrk:Nu/MEdS9plww", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736578632, "uuid": "b5ba63af-01f5-4d79-8735-54aa24c6515f", "value": 25412552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736578632, "uuid": "e318993d-2c14-49e9-9710-8050e36fe299", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0cea39d7-cfe7-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736579047, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736579047, "uuid": "0e3ae0be-c0f3-4544-ad6b-52daf5f1f6e5", "comment": "Malware payload", "value": "f373e41adbd29519150734a9be3bba8a", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736579047, "uuid": "c2df01d3-0614-4bc7-9e9e-809c3c4c5143", "comment": "Malware payload", "value": "ee4dbc60d37198a807e286a34020b1d3cbb73f36e3a3a40e36b3e2c608625231", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736579047, "uuid": "111f9332-40fe-4652-acac-1b0af0d7e0e3", "value": "T16D7412B792BC3C51DE6A88F606A969524CCCFFDB2D660D13DC6B3D6C24C036221B49", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736579047, "uuid": "8e5f04bd-dac1-42f8-b2b8-e2ee147d169a", "value": "6144:KB9VhKlBPvM6h5SNENomMBzJS/PN66hpShff33UZrM4y1n5QEQv:KXVQhCKoBVSdsRHU64UnDQv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736579047, "uuid": "0523def7-c162-47b8-9360-225cd0e0f72e", "value": 363286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736579047, "uuid": "f9cc651e-8695-47c6-937c-845f7b5d93e7", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "637b4e53-cfea-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736579107, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736579107, "uuid": "09dd9e8c-2535-4769-8a37-62efb4ac540b", "comment": "Malware payload", "value": "be89d598cd96443479c02b022ff70532", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "jalapeno", "colour": "#045cd5", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736579107, "uuid": "a975c14a-11dd-4ebd-9a43-42e58f33c89e", "comment": "Malware payload", "value": "a4c4487dcacebf5048b2266233f5645cfe421154f26e6685ced36aa0621037f1", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "jalapeno", "colour": "#045cd5", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736579107, "uuid": "cd092891-720a-4738-a7c7-982ab360bb70", "value": "T13DB44B5AA7A843F4E5B7E038C881511AF7B17496132197CF53A14AAB1F23BF19E3E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736579107, "uuid": "5966d585-ba98-40f2-ad09-f13a0a8dcd2b", "value": "2c0880db5251b34da206c7402f553df0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736579107, "uuid": "44bd739a-8384-42fb-ba5e-36f60e3e991a", "value": "6144:9m2AOgAgbVYlfxTtR9HVOPeTEKybk5e6XJugmE8fpNj8Osc11gPbuAvZmeGzpwG:9mLOplfLHVOPeYceXE8Dx1gPbVv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736579107, "uuid": "e6c26913-f01b-4f64-93c2-c7660697436c", "value": 538624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736579107, "uuid": "5088d070-8944-477c-afd6-3464d8c314f0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5405a8b8-cfeb-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736579510, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736579510, "uuid": "0e04513c-8274-4ff2-88a3-56f020a8d2ee", "comment": "Malware payload", "value": "f3656d3edb53cb682dec7f13d0a7a4e4", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736579510, "uuid": "d48e0f44-6540-4fc3-85f2-c27cc6e13ef6", "comment": "Malware payload", "value": "cb467adca488db7a0c5cde6d955ffbe2c7f5e1f6d174f6714da53eb9d9e9d400", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736579510, "uuid": "37c6a00c-f41c-4b62-bb71-6cce24259457", "value": "T13B85337D88902E7CDB1D87389372433CAE703F2A51D9A61131F0AA19A776F49EC68C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736579510, "uuid": "9d679583-8a38-4b60-898e-4ec75a4f5a4e", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736579510, "uuid": "a1ffee73-83b9-493b-ba05-3d9c377d4bf3", "value": "24576:085g/gbCoI04MbueANOWxaE+zQX01oi5YvE+ChJ7txaM1fMYC9qZRQ+Cbpl90m+Y:085gofhZuyhQ6xp1fFUqPiL3ssDd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736579510, "uuid": "ef24a692-f128-43f8-98de-b7ab408b5ee9", "value": 1754112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736579510, "uuid": "8457fcc7-99ff-44e0-9e68-561841560543", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6239be89-cfeb-11ef-afe5-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736579534, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736579534, "uuid": "3f5a4331-0886-48af-b028-4dd0b14a78c0", "comment": "Malware payload (Gafgyt)", "value": "a42441ae6d4aa9519f2446eefd7d4ad4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "PercXSwarm", "colour": "#74596f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736579534, "uuid": "20ddb87c-8827-483b-b07d-51f0099f88c3", "comment": "Malware payload (Gafgyt)", "value": "a20eae7046a22b1a174c057c3c7fce6d4224de642760f709db61826771355d1a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "PercXSwarm", "colour": "#74596f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736579534, "uuid": "125642df-5250-42b7-b6d4-2b14af83b12d", "value": "T1F8E33A05EA808B57C1E2277AF7CF424933339B64A7DB33055928ABF43FC27995E225", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736579534, "uuid": "10427de8-e967-4b7d-ad28-9862da641243", "value": "3072:uenraJTZv6uYXNq+3rIpIUnnFEM/9IWxhmpwfvRQfZn:7raJTZvZk7rI2UnneM/95mpwfvafZn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736579534, "uuid": "abaad4a2-8a75-4462-b1e1-f1f701eea2b8", "value": 150666, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736579534, "uuid": "99628d18-3c8a-4d6f-bf50-571b4515df06", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8970d1bd-cfeb-11ef-afe5-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736579600, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736579600, "uuid": "efa591ce-bde3-4b18-8aeb-61b2bac22e08", "comment": "Malware payload (Gafgyt)", "value": "d450da464b924a4dedee7ed6149e0770", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "PercXSwarm", "colour": "#74596f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736579600, "uuid": "aa7ae274-ca62-44fc-91ad-75e6064c02c1", "comment": "Malware payload (Gafgyt)", "value": "ce9988bca518cfc3bdf0458188b00e1e092c6f86e18904b5e294fe1f55505a24", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "PercXSwarm", "colour": "#74596f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736579600, "uuid": "6543718d-5cb6-4f17-a0e1-4dded8f4eb5a", "value": "T1E8735D029791C073C1831B7626E7DB610532FDB71B1A9E66E32C7EF09F02489B16BB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736579600, "uuid": "f20a3e16-c3f7-4453-b49e-00fe8916c736", "value": "1536:Q3fotSURUFWDYe3rs0oU/xUtZ6HXn6bz8qmQg26hy9H0Ep:Q3fiSURUFWDprs0oUpUgXns4qmt26M9t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736579600, "uuid": "e1a84a3c-1df2-4902-802b-448654d39937", "value": 78485, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736579600, "uuid": "86f06d96-24b3-4995-95a9-42f486d9cfbe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "423f2f7f-cfec-11ef-afe5-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736579910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736579910, "uuid": "e8c96c92-4b26-4d33-865b-f2a775cf240a", "comment": "Malware payload (Gafgyt)", "value": "9b910ddd59845e69f439ea9464b99ed8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PercXSwarm", "colour": "#74596f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736579910, "uuid": "a1f938c5-a1c4-4d00-b2f0-7167050547e3", "comment": "Malware payload (Gafgyt)", "value": "835a2a1e61cc79d86f718b10acb7ba175cf525f415bd5403b30d3b5c13f947dd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PercXSwarm", "colour": "#74596f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736579910, "uuid": "3e5a9daa-7dc9-4ca8-9c03-b7873ec4332d", "value": "T1CA932A377B270E23C0CA147212E30331A7B5D79938BA5797B9D06DAC6F16AC439127", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736579910, "uuid": "7f49406d-48e5-4d7e-8d80-77995d5ce768", "value": "1536:eRz7OnsBNM5SMtetABWLNlfQSO2TcmQ9FqXjewfeXse:SOsBN8EAWLNfcmQ9FqXywfkse", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736579910, "uuid": "3f3d78c5-217c-4abe-afe2-5559bf8a006a", "value": 96043, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736579910, "uuid": "0531c7a4-8fc0-4aaf-93d8-15f11c864835", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97c799fb-cfec-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736580053, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736580053, "uuid": "01949d3e-20a3-4574-b5a7-bf08498b392e", "comment": "Malware payload (Mirai)", "value": "f8b1880b02a7b0a23ec73cfd55f22f55", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736580053, "uuid": "10266a87-ea40-40fe-bd2c-9903c5dfb8f4", "comment": "Malware payload (Mirai)", "value": "98d34e22db0fc7d8e1355b83144f0ac0f9facfdb19264708377e5d76360d78ff", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736580053, "uuid": "efe67c21-e156-49a3-bae2-c6a71906eddd", "value": "T133A3F94AF8816B11C5D511BBFE1F019A3347ABA8E3EA72139D141B6477CBA1F0F276", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736580053, "uuid": "269d4011-f03b-4ed6-b5db-24bdb6f4d1f3", "value": "3072:Qq3rEmYfJJaC7edJcJaTBvK26UoXkCAyUX0v7p6X:XxK77edJcJald6oCAyUX0v7p6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736580053, "uuid": "021c366f-2225-46f8-873a-b3cb32f8230a", "value": 104940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736580053, "uuid": "e55aff06-b8e9-4abc-be77-d7deebe0e7af", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3f61b1c-cfec-11ef-afe5-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1736580101, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736580101, "uuid": "c76346d4-7a1d-41fc-83b7-4f17e5d64d2c", "comment": "Malware payload (Socks5Systemz)", "value": "26f594bf8ea9eb600ff76c81f6bb9287", "object_relation": "md5", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736580101, "uuid": "e969ef2a-ccf6-4507-aac4-7a4ebec7ef03", "comment": "Malware payload (Socks5Systemz)", "value": "ed991ffaeacea77a14b85c977bcd22ac62930b9e9238514d9da903692c5227f8", "object_relation": "sha256", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736580101, "uuid": "20c8165d-4dba-43a6-9da2-6013f630450f", "value": "T198E533D4CA940C33E0518AFBEF5E468656226E585D312D58338E7EDCBEF1720924E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736580101, "uuid": "5bcb28c8-4536-4d40-acd3-9c311a4a5138", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736580101, "uuid": "7d9aefaf-38d4-4b75-8ef5-3e7c40b6c6b1", "value": "98304:Mar5/5kBcdcNIDhCgvZ8j4AxwtG85CFVJvt3e9:DrhsfIVCgvZoVJtc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736580101, "uuid": "a1978a16-43f7-4653-8d8d-2443816b8b44", "value": 3228674, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736580101, "uuid": "191bb885-77d3-43d3-9952-821582127665", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "739bf55f-cfef-11ef-afe5-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1736581281, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736581281, "uuid": "db573d5f-c349-4f89-b176-d9e8f79ffa6f", "comment": "Malware payload (Socks5Systemz)", "value": "717eecbcc025ddcc677062681554b544", "object_relation": "md5", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736581281, "uuid": "c022def5-2c45-40d8-a8e2-823ee91b1de1", "comment": "Malware payload (Socks5Systemz)", "value": "1b3b2387ed643501e6f7efbd447c354089ed9abf8a7c410ab292ece7769639cb", "object_relation": "sha256", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736581281, "uuid": "c86d5db7-2167-4b71-aba4-deb2c316cf41", "value": "T14FE53309BCC1833AD521DBB21A6E20918762F94B3C75921C30FC49AD7B36E615A4F7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736581281, "uuid": "9ff60123-f1bd-46e0-a392-e4dffb9e5f77", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736581281, "uuid": "65221a31-4504-4872-bfcd-7680f20367ad", "value": "49152:C9bqyVitGuifBZgKvw+LFwN3YYuODB8mvBosJfoQ7E5ph4MlkbVznZeus:MbbVitGrfsKImwzuAvR5oQMK3e9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736581281, "uuid": "4924dc84-2aad-49cd-bd40-3e137504d3e3", "value": 3249361, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736581281, "uuid": "664b88b7-7ce2-48be-9f98-85910429f0ad", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c0b16f8-cfef-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1736581500, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736581500, "uuid": "2e76a8b8-704a-49ef-b719-bb5eccdf5b53", "comment": "Malware payload (Amadey)", "value": "aa166f9ed8f9b5823d50c2fe02367bf2", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736581500, "uuid": "9d50722b-3dba-4bbc-867c-96985ba111c4", "comment": "Malware payload (Amadey)", "value": "dda545668e2e77f90ce6c09a9f444ec0a8f0f68bddf6ed3269ecf2893fdcdffa", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736581500, "uuid": "e99f9caa-1583-4588-a6e4-452e9dfce624", "value": "T1FC9533091EC0A67BFE5D43392FB2520E2304D8026FEFB87113571E91A1A48DECAD67", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736581500, "uuid": "d3a0b25f-1fa6-44b3-9657-991bb751bb61", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736581500, "uuid": "0d3cb07b-e762-471d-a04e-560ee29851d0", "value": "24576:0a8Ma0QeAIGYV8QtLbl3p0HJ9Lftad04r5m3Z4guVyu7mX8D6+zPiwMfJoA0Dx:kNoxNp0HJ9Lfta+w5m3KV++TMOR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736581500, "uuid": "e3be5a83-d71d-4386-9a23-3ea612070647", "value": 1916928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736581500, "uuid": "acb469c8-94d4-4581-9802-0f556838770b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68818da5-cff7-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736584698, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736584698, "uuid": "fda9e8f4-918f-4ca5-8a73-5c88ec6750c7", "comment": "Malware payload", "value": "cfe45faee40c307b8e0a1dd0e811dff5", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736584698, "uuid": "14e73e40-5a0f-4ccb-92ee-4dcd00607524", "comment": "Malware payload", "value": "3f356fd5c45bed3cc64c4767d54fdeef606723b68844552dbcb232cedcb1f6fd", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736584698, "uuid": "39523cf5-d854-49ff-b601-35f13e1103f0", "value": "T11B7412B764AC3D91CE0445F98175A0629CCEBFCBAC8E2553CCBB3D6A58C122574F4A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736584698, "uuid": "4bba38f3-f9d1-4e9b-bbd9-22f2192c8143", "value": "6144:gTdzAPty6h7SDYMtpEPpK6h1Sz3oBpSTJJtr5jwUYs2kk2:giKBteQroBUFftvk2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736584698, "uuid": "811bd67e-f340-459e-97f0-df562e41de32", "value": 363114, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736584698, "uuid": "355a3dc8-68ae-4792-931c-413992b1f44a", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71650d6b-cff7-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736584713, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736584713, "uuid": "ab3594c8-3c2d-49c9-83c2-ed7d99d3e526", "comment": "Malware payload", "value": "76a74c20ba9bfab20bef68e4857a6efc", "object_relation": "md5", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736584713, "uuid": "fdd61ce7-bc7d-4a94-90a1-74e733cd3a36", "comment": "Malware payload", "value": "1ef7c9bba2ceeb969a23ce013ba7fb26daf8dcd9749abc8992c9836b93c22fe9", "object_relation": "sha256", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736584713, "uuid": "8b0315a5-bb9b-4bac-82fb-9d34fba3612e", "value": "T1C526331F9BC5D9E8E07541FB9CDB75AD29F4B8B23259B6F609C2B8242C1193804BDE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736584713, "uuid": "a3bba06c-3e2c-4fe0-9235-8f05dbc75079", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736584713, "uuid": "918f233a-c10a-434f-b04a-8f535e8913ca", "value": "98304:J72E5TyXYpbGJVgXx6NZ3iuikd3dGb163MZZRVMWzCKNkAQQu:h2sm2KJu4EunpdGpZZRyWjNc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736584713, "uuid": "aae18b12-9c38-4453-a6a3-de2187c10753", "value": 4532224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736584713, "uuid": "ac9b1823-89c8-4c7d-a8dc-ab8a01f095a5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "375126fa-cff8-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736585045, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736585045, "uuid": "4c2b1f43-0900-400d-b028-2b6abf8f57a8", "comment": "Malware payload", "value": "a2c41361198e61fc044f20d8fe1d9649", "object_relation": "md5", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736585045, "uuid": "3dcafd4e-c635-4e72-aff9-c922a84c3707", "comment": "Malware payload", "value": "b0c1b637776539e7909614ffd6937433e61ea1675de2dfabff893cf56ae32a64", "object_relation": "sha256", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736585045, "uuid": "fb994cf8-7739-42df-b5f8-a6c42f26ad34", "value": "T113E2F131AAD564F2E0E41FB0D2CC58416A1A25B064F521DA7E84465CFDDBCD2AB727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736585045, "uuid": "a187ba3e-6c0c-410d-a2b4-fc14f15c0476", "value": "768:iaCtCJaDp+QMOYkeAZukJ5ARtAtZQwzZRiH3UD:iaCGg0DTSJ5APAXPzZRiq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736585045, "uuid": "4b8c5524-8731-43b0-92b2-c394636e9c33", "value": 33636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736585045, "uuid": "a39a0046-5949-402f-8bc4-7b672299c473", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aec142c3-cff8-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736585246, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736585246, "uuid": "55b4d1cc-1167-4486-8be8-75873c38b429", "comment": "Malware payload", "value": "293a622644720da81da8af12a018747c", "object_relation": "md5", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736585246, "uuid": "3b8c7118-e911-4d15-ad66-163756764fc9", "comment": "Malware payload", "value": "54c32c81f7ff9a46b6829357b4cfa9e4237c0fe0c651f1c4a5fbff9812bb9f79", "object_relation": "sha256", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736585246, "uuid": "27e6f719-faed-4879-8180-23fe65226ec7", "value": "T18CF2D03F100D45A2E0F796BA16A513B26CB4C6A9E6832DB6DECEC9D3DD15051D4C3F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736585246, "uuid": "d1c6882e-cd90-4f05-820f-3a55d8b7346e", "value": "768:G1oTESthBnB0vB2dM6igq4IWhLuqjJgGlzDpxYsR/ID:G1WEqjnWv2biFbW7ZVrYJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736585246, "uuid": "00841fd1-9f3d-43b9-ae36-170aca1cddfb", "value": 36896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736585246, "uuid": "89832204-edd5-47f3-a4a3-c3056d29456f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a3139a0-cffb-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736586366, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736586366, "uuid": "d5535fec-3a0e-432c-8e1c-952bc393f2e2", "comment": "Malware payload (Mirai)", "value": "79dcf2d69d8a8201ea1bed02e0b487ea", "object_relation": "md5", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736586366, "uuid": "60b44f91-6dd8-4497-a6c2-2f5d9f9787e0", "comment": "Malware payload (Mirai)", "value": "0e693952d6b6d8305495703ce45650b63a5d753465e40792ef80d6e488c62390", "object_relation": "sha256", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736586366, "uuid": "74d743fa-ae87-4528-aee6-9954b9e2a3c9", "value": "T141130219E12F87AAF4A51D3D2C2F52049379BFF1E486332A73671EE5899045B5FE64", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736586366, "uuid": "2670ecce-1cc1-4930-880c-bca3ff599e6c", "value": "768:u8BpT+eJ1GzfX7ad019USpqP1B36aqiQWPiMKktdAtoL5vAp0ysuGq3U7GI+:u+ThJ1GzfXWiBqPTqDiQEBMWGI+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736586366, "uuid": "79fb8767-39e4-414b-8dac-a29ff6266e44", "value": 43552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736586366, "uuid": "0f77aeb9-9a2b-49ce-96e5-9cb41530cc54", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d580961-cffb-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736586505, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736586505, "uuid": "32db65a0-c641-4689-92b5-dd2b8801f0b0", "comment": "Malware payload", "value": "9edaeb8260a05ff61b7d81d6ac8085ba", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736586505, "uuid": "fdbff57a-4400-4276-92cf-daef0bbd3ef3", "comment": "Malware payload", "value": "5fa90f3f40607afc4628e5f9af2fe6f73710a9029a4dad06aabf749613d7155d", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736586505, "uuid": "38c70fa3-17bf-4c1d-99d4-d0881830c4c7", "value": "T104B5333B62BDE80CDD13E5B4D22533067D77588B22D825BDDB17D78AE8E41097722B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736586505, "uuid": "8f2ca91f-fa94-450b-8b97-5e5c09f125c5", "value": "49152:N/gNqpO3vyhUrTQw4IG2BDI0RntywB5W4ERbNW4ERb1YYc22TFOpjtihq:NYAI3vbQaG2BPnA6WnZWnh86tih", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736586505, "uuid": "cadac071-6d2c-4bf7-bdd5-ffb7732f7d43", "value": 2377224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736586505, "uuid": "46a07bd0-7f05-4b8f-9809-149ae5c4ceef", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ab5a4a0-cffc-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736586850, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736586850, "uuid": "09502474-5c43-4896-8d08-eeaacb44e495", "comment": "Malware payload", "value": "f0b030cc0e73b7d1a931d34d6359efc5", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736586850, "uuid": "c3296f5d-86f4-4cb8-86fb-1dae45777bbc", "comment": "Malware payload", "value": "f31ff50071c67e2b82165444b8bf20e6a46354f398cbc390e19dc6e4732969da", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736586850, "uuid": "9162a224-6572-423d-8644-a960e2887a78", "value": "T16373F67755623D0DC2734C1978CABAC83718C023D30755EEEAB9AA6CC3CB9C652727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736586850, "uuid": "aa71cd7c-9479-4321-a619-0678077003e3", "value": "768:aA1fho1/VKXp/tGWu7/kp/8NTYEdlk+F/94it5dwk/Q+GRNv+f5AfpUxnHeob4fy:aA1fho1m6n2PxR1X1t1RB1p+dK1a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736586850, "uuid": "4dcc29a3-71c3-40f3-a3b5-0849189a8408", "value": 80335, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736586850, "uuid": "b122a73f-1332-4a43-b706-115404ecadd3", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa74d218-cffe-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736587816, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587816, "uuid": "ccb393df-c851-4ff9-9484-538c41434c10", "comment": "Malware payload (Mirai)", "value": "6e4bbb8b19271e5da4eb725b20462314", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587816, "uuid": "52b292a9-23f4-4419-84bd-0bcd40f44d53", "comment": "Malware payload (Mirai)", "value": "891ac4bb320725449b549ea5c7dedb37c3e4cdd408f43913bdc9eb25d698cc72", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587816, "uuid": "83b066c0-819c-415e-9daf-679a088fec7a", "value": "T1F403F192798ED521EC608530FE3F18167E2BBBBCC1D77428A1210A3879D1647712CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587816, "uuid": "a330bc92-88a1-48e0-86fb-f8cec454b89f", "value": "768:cu7RATMUu4f7RDdP6NM8I52VNbvdFsDJ456Bs3UozOX:tRAC4fNDdP6N5pd+DwzOX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736587816, "uuid": "85991ce2-b85f-4b3e-b053-f6aa0d2de724", "value": 39296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587816, "uuid": "e3da8b33-116e-4daa-8e33-190a984b218b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa7d82a5-cffe-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736587816, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587816, "uuid": "c0e4c1b8-a7e8-46da-a262-561c96c087d1", "comment": "Malware payload (Mirai)", "value": "a6c1d7bc88a8a2a63e3aeda922848972", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587816, "uuid": "979eeff3-7ab1-4fb5-bc08-f2a437d1392e", "comment": "Malware payload (Mirai)", "value": "77890a55ee9bcccd58e84511cc0872580b941b6db70bcb850bfa5570f782ef6b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587816, "uuid": "9b6d8e45-a058-4df9-a62b-2f51bde02757", "value": "T19803F250C0765B08C1DE90794CFAB68FD9A0B00D68683BFBA38AB97D8D73F1A5E041", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587816, "uuid": "6d435529-4305-4b21-ac44-41e74f311fb3", "value": "768:+wtA4ekApSSGy1ITyzAv+tTmoTu5Jbb+Y88mViJlHGq3nbcuyD7UHQRjN:+wtAAA7DAWlTWJe7eJlmq3nouy8HyB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736587816, "uuid": "5a29edd3-f167-42be-bf86-eff60e504482", "value": 38296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587816, "uuid": "bd754b31-20a1-40ec-87e0-dc0247d44b21", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa7ed85d-cffe-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736587816, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587816, "uuid": "be365b52-cc62-4726-ac64-28bdd23aaa72", "comment": "Malware payload (Mirai)", "value": "7a69511eef5d1119eb4c7043b5ba9b53", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587816, "uuid": "51766af1-4a5e-4fcc-a1a1-569815ad1f21", "comment": "Malware payload (Mirai)", "value": "875540df342c2bfbc03e69087ccf620c38b3e37603cf20f053f8d95f6fc5c099", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587816, "uuid": "2ee47dc1-5f8d-4274-abdf-6bd664f5c956", "value": "T10A13E14DD7A1EA55CCCF5839B0CD13B61E92B1C224271FDCA354AC8D6552C8ABCCD4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587816, "uuid": "a408243d-9a15-45cd-8f7a-aeea60c3fc54", "value": "768:XQdzLFMbXkqyyxwmGFm3qsSPhkj96MiKrecs6cDtyO5XnQDgNYpLW1:gPmwqBOc31LNrecs6KtPXQD0Ypo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736587816, "uuid": "04d24892-b3ac-4787-b0b3-16e007768edc", "value": 44352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587816, "uuid": "6d491bd8-0b2d-4e43-9152-9c2d510d2bfb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa83fe8a-cffe-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736587816, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587816, "uuid": "c0cb0307-cf75-40f1-a070-5d1fb09e4add", "comment": "Malware payload (Mirai)", "value": "e81d5542ca01980a4f502ff542d29a74", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587816, "uuid": "4ee08989-a61f-44d2-829f-e7e17f37907d", "comment": "Malware payload (Mirai)", "value": "d1bfb6a6a94a91073fe9a22f34587c520d4bd67fa4d0d4361b8a487c242e1734", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587816, "uuid": "ed103718-1159-49ad-a064-1dd7e50fb8d2", "value": "T16213F185CE067ED3D9612D33FFA8C98B47188AE5C27A361776390BBC5CC2684D4E85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587816, "uuid": "6f5a8764-5820-49a2-a013-e3c5d5a5a78b", "value": "768:ocZOKj8x/QSQ3y/4qFTOdeoJWBhdYnjWcBWDW4s5GyZDa6XXUkpAg9q3UELg:jXwQSYPqFHI8rOjBn4+9DXUSApLg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736587816, "uuid": "5cf24ea8-05d0-439e-9470-9aee5d8f36db", "value": 44600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587816, "uuid": "ef5e7667-e496-4904-ba68-a29421eee877", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa8bb9dc-cffe-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736587816, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587816, "uuid": "5e2ad3c8-5722-40c1-9727-07289df5b45f", "comment": "Malware payload (Mirai)", "value": "93aa9a8b4e28717e0830ef8b2d82bcc3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587816, "uuid": "6955e1d4-906e-439f-9d0a-f75115eec67d", "comment": "Malware payload (Mirai)", "value": "39bd327da21fbde353f8e485be703f20946c1862a5804775dda72bd0cd3b42aa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587816, "uuid": "9569ecb5-633d-4331-910b-8b943f70495c", "value": "T1C25302D2A440D1E3D75A03BF65E4E807FF651BBC79E9309A3679C24861E2D0878D7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587816, "uuid": "b2057251-c0a7-476e-a00c-dad45117632f", "value": "1536:zVQSmwtMJXmejtrLTM5Tfv83KJ2crl2EW8:zVywt8XZtLgTX83KHl2EW8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736587816, "uuid": "d85087be-cfc0-4d8a-b297-b8d0c805da83", "value": 61844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587816, "uuid": "e40255ca-cf01-4ab5-bef6-34fa27f91672", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa8bc938-cffe-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736587816, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587816, "uuid": "2c008e95-7f3d-4913-9285-02d1ab80aab5", "comment": "Malware payload (Mirai)", "value": "3ad65bc28dc97b946f2f4cfe7af9dbcf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587816, "uuid": "5a4b8b8a-928e-457b-9e24-2c1a0b4e7a6c", "comment": "Malware payload (Mirai)", "value": "2e447f7ec23cfe7329559c4acaf87f90be77d219004904b2652954e2ac492418", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587816, "uuid": "2ff9c9cd-c0d3-4d61-b219-3fcc8ca127c4", "value": "T16403F11195DF9A91D7D552B81A3FFE0D30C1D33941292A62FDC06631AE68FAF263C9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587816, "uuid": "4699691f-de6d-440f-b953-836ffc1a3e3e", "value": "768:ea+BWS+ZPwIIBPGXna4nvdQL5zc6R96SMO/ieUeSMI1vmEHfnbcuyD7UrQRj+:ea+BH+hKBAa4Vcc6RwSMO/ieCME+WfnP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736587816, "uuid": "33fc9878-2cc7-4126-83f7-aab1cfeed368", "value": 38724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587816, "uuid": "1808604c-a6b9-4de0-b8a9-1ec2c97ab79c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa8d2527-cffe-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736587816, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587816, "uuid": "583d2d52-5a52-447f-b28b-da24717a449f", "comment": "Malware payload (Mirai)", "value": "802227bb8856aad7c3e9fb55c4fb6dc0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587816, "uuid": "0a4e265d-a6e8-40b6-970a-55229a18f0e3", "comment": "Malware payload (Mirai)", "value": "30327d430e0fbc6205a73d9a9bfd3c7eb971484a737e42a615a7624fbfda1e83", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587816, "uuid": "61eb88bd-492a-42bc-962f-f60b291e63c0", "value": "T12213F1A8371205A5C79AD5F18BF443667F712FF9618A8C1DBC61DBE2A9D004C7CE4A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587816, "uuid": "d07482d4-6bf0-492e-b3e1-cbc59bed4e0b", "value": "768:NDfzzMwdu3W4CbuznqQd8eYkGyJfH6QhjS0jlDGnHMhgNSRxUkCkHhVeg527f4H8:NDEwdu3ubuznqreGyJfH6QhjDGnHMhgV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736587816, "uuid": "2c10a258-fda4-4ac4-8d05-550120944796", "value": 44196, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587816, "uuid": "a1dbd854-e8f0-488d-ab35-a2da3e5e0828", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa8dc92a-cffe-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736587816, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587816, "uuid": "df032da9-d49d-4649-8436-49bc78b7575a", "comment": "Malware payload (Mirai)", "value": "307be28cb9e55775f3c4fb52e73bfda8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587816, "uuid": "b4d08d7a-a5ee-4db4-9951-463d2102dce9", "comment": "Malware payload (Mirai)", "value": "bd5a5856a3a4d7865fd7f1c2fa789206a17e32ad2da3680ef7dc9c5e0158da35", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587816, "uuid": "c1331085-49d0-4901-a8d6-c25d1d871506", "value": "T1EE839E61F0142CE5C8660674F0F8ED35471369F123A52CB26EEEE9A188F368DF44AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587816, "uuid": "72409cb7-785d-417a-88e7-f6233b5d8e43", "value": "1536:DWRU/uih+nyazXUcMnYVohwH5wX6SNmTdEyR4r:DR/F+nyazXenY66L5dRg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736587816, "uuid": "38fbb7f1-7311-413b-a721-3e93784402cc", "value": 82652, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587816, "uuid": "63503163-65e8-4487-87f1-248245baa461", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aaa395d5-cffe-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736587816, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587816, "uuid": "ebd3460d-06e4-4266-b183-67c5ab7ed372", "comment": "Malware payload (Mirai)", "value": "6ced407d2f3dbadf11a2dea7e4e2af97", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587816, "uuid": "deebc85d-bd09-4fe3-a387-45194190d33d", "comment": "Malware payload (Mirai)", "value": "6e6b6dd3955df2ffd78be1b1b2379aedd3e617b22000af59815019048f83568c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587816, "uuid": "1f4d4860-c091-4534-ba1e-ce9a79298aeb", "value": "T1199319C7F810DD7EF80BD67748A34D0E7671F2A00A930A227767BA67EC761A5141BD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587816, "uuid": "8fcdda51-e681-4468-afcf-9cc2a5dfc193", "value": "1536:RsSFA59Nq6aNElmnwzX8/EqXabQeuacWjcW0JcWcBl4rZpipI4WlV/N4zfVZolAf:GS6Nq6+OXqqbQeuacWjcW0JcWcBSrZpg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736587816, "uuid": "0a5932ec-ef45-41ba-844f-88e2c8d73010", "value": 97552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587816, "uuid": "e98e3777-99d3-46b5-ac72-4dbd36925c96", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce381848-cffe-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736587876, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587876, "uuid": "4f931640-d14b-486d-87b9-d771804ec431", "comment": "Malware payload (Mirai)", "value": "82fcbd938b2e28ae09b7be9dad514819", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587876, "uuid": "7aa27259-a4db-424a-86c7-71c12ec4f9ee", "comment": "Malware payload (Mirai)", "value": "09b423cd950d74da88818aaad56e52b7278bc0d14e9a96e50b6ccfd54c79c326", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587876, "uuid": "90d20848-9fd1-4c21-afdb-676be8a9bbf6", "value": "T1B103E14BCC49AED6E9FFE5522709CAD1F7E05A4DBFB18CAD181ACB06332A568520C9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587876, "uuid": "32a4dd6c-0637-4c05-852a-843e280fec3f", "value": "768:ysqQ4JXTPxcCj3do/vTKRVDkO1HmQcvbG+TqarjEP8oQ+BTbDYy4uVcqgw09U:BqQbCj3do/+fDrJ1cyUqOgkB2bn4u+qt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736587876, "uuid": "37491a6b-f28f-47e4-b8e3-2d7410260fdb", "value": 40324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587876, "uuid": "0b7bef93-540c-4cfa-b831-067a8042c4e7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce3bbb20-cffe-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736587876, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587876, "uuid": "e0d61762-8b49-48af-8be0-24637808c143", "comment": "Malware payload (Mirai)", "value": "541dc01d8d4e4951a80d47918f598ce2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587876, "uuid": "46303888-9427-4bbe-8b16-686d2bc6b2d6", "comment": "Malware payload (Mirai)", "value": "f96542e015d336b20eecf5ce8b7add831791eaea5994ef1d91ba5c230ed2aa73", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587876, "uuid": "8355b935-915f-4a42-819b-cf871b29f5c0", "value": "T1D092D023736808A2ED711D779EAA8667681E8BED615E3073029082785D99863BBFC2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587876, "uuid": "e470f77d-09c4-4760-badd-89213f950570", "value": "384:N3me3Vg19bm2MxowbW6kn0HG0sdXIC62vnL6Myx4E6qh7qmdGUEpiaMyi:t3Vg19bm2Wo9aHG0uFL4qq9q3UEL/i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736587876, "uuid": "308fa386-1bb1-4246-97cc-d471cd26989f", "value": 20276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587876, "uuid": "08577201-8a04-4435-b7c7-1afd0208f97b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce4840a1-cffe-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736587876, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587876, "uuid": "d2f37c2f-5410-4a99-898b-a27b7786212d", "comment": "Malware payload (Mirai)", "value": "dbd52cab3f34236c5ea317dbef35c611", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587876, "uuid": "1bcad1bc-8063-4bc0-9b9c-808dc2272743", "comment": "Malware payload (Mirai)", "value": "80e9d07dd1222b4908748d20dc9864d316a194b62bb541b130b4f054b8b504df", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587876, "uuid": "90a09598-3096-4fb3-84c7-bbcb82a029b8", "value": "T1F3F2F2824BFDEAB4C07357B144D7C960B636A0A3EF061B7A14C571BB4D78A422E23F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587876, "uuid": "ad6d5573-e4c3-489f-83c8-91408528b505", "value": "768:G+4qtvWUAASjjLMGz7/tjBQd4Mt8nEPH3Ggu6APvPWx01:19tvWrASjjL17/9BODtoPgu62WY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736587876, "uuid": "c7d80f81-00a0-4f7e-8c7d-9ee38f9711c9", "value": 37540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587876, "uuid": "2197d960-b526-4c64-8a55-9cca5fcdc1f6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a96ba6b-cfff-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736588165, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736588165, "uuid": "5e9bd704-8258-4a4f-88ad-7881f22b771d", "comment": "Malware payload", "value": "488ace98fee59888c00c9a6017aac1d0", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "TgToxic", "colour": "#55a911", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736588165, "uuid": "33fcbe2e-ab91-4b47-b441-ae5008240965", "comment": "Malware payload", "value": "4e279eb38b7f85b1889aab84fbcf57e0d260f0a4147755b28525b12a6f5a8015", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "TgToxic", "colour": "#55a911", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736588165, "uuid": "3b03ef76-5c0d-4909-b5bf-4275d00eeeb1", "value": "T1FB06BF5AB764456BF8B224F90DAEB2B6D54A1E60CE2282DBFD043F0C14779D82F456", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736588165, "uuid": "7cc90740-9213-4105-b0f4-20892b8b8481", "value": "49152:NgWOwiy8VlJ1mZtpo1BOM1duFr/nNebPXoLmJj+1fOGnRnJzzvv/7cj00o/um:61y8VlJ805XoIiOUfLDcjzK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736588165, "uuid": "fd34b926-149b-4f39-b1fd-fb72bf133df8", "value": 3660300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736588165, "uuid": "0ed8813a-0882-4ab5-a10a-b50505bcecc7", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "165518fa-d000-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736588426, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736588426, "uuid": "67107797-bfd2-429f-a489-af997585c3d1", "comment": "Malware payload", "value": "f9496eeeb40742339cddaebdcfd9c8fa", "object_relation": "md5", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736588426, "uuid": "831822c9-edba-48b8-8a80-1f9f38d9156f", "comment": "Malware payload", "value": "490e793d8e2eee8ee51c9c601ff66de3272006d9c8b9ee57bb16001e91b77ada", "object_relation": "sha256", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736588426, "uuid": "4a4bc6e5-f958-4b36-82ea-63d472b32b10", "value": "T15CE2E126E5C749F5E8CD22BEEC9EF4068425330D164C19A7FECC27264469F62650FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736588426, "uuid": "c4a20708-8111-4cbc-a6e8-dc1bf49bf2fe", "value": "768:kHnX75wJ0U9xqSZQNXeaegCz4c4jcxsJadxdCnbcuyD7UryqQ:+M0Uvq+Ql7A4c4IxsJQxInouy8mqQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736588426, "uuid": "9db6d612-3131-4add-8b87-9ce0513981bb", "value": 33244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736588426, "uuid": "b47664ba-68fe-40cd-9a64-e2228567b64f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a3acee31-d000-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736588663, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736588663, "uuid": "edcbb83f-dc2d-42c8-9806-8cb9089c6dd1", "comment": "Malware payload", "value": "955cabc59d8995c78725d791d1732e51", "object_relation": "md5", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736588663, "uuid": "40b85c30-dcc6-4d5c-80d9-bdb5d851a486", "comment": "Malware payload", "value": "92b22f9837aee9110802ab2442ec6de682046a78959f277a530b48cb68628e0c", "object_relation": "sha256", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736588663, "uuid": "f34c669c-c71f-4529-8b11-d40826e74144", "value": "T12BF2E1C38372DD79C93B58F7193246C5F59064255339BABA48E2B0BACC619A21822B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736588663, "uuid": "6dac3957-96d4-46f2-ad41-2da885127b61", "value": "768:MyrEld+ec+w2NAHNAtLkx/zz1ATDGZCfKCLsv9sPT:3gO1+wxHNAdkJ/mTDGZuKCoFuT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736588663, "uuid": "69e53db7-036d-40c8-8b48-ad47024cdcba", "value": 35916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736588663, "uuid": "58e2fbfc-b448-4de1-9782-4ec881b45edc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb35bd79-cf55-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736588848, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736588848, "uuid": "9b43cbe0-856a-47a9-919a-264b2fc6d430", "comment": "Malware payload", "value": "5d158c7620a7abfd37ec7aa9b69b07e7", "object_relation": "md5", "Tag": [ { "name": "android", "colour": "#0e449a", "exportable": true, "hide_tag": false }, { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "Wapron", "colour": "#d9200c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736588848, "uuid": "a3c48cf8-657b-44b1-81df-5c295ed47728", "comment": "Malware payload", "value": "dccab2f5e35c5ac71b4b7d899b7e8b4ebdbe965bfb95699fa2b8ceb6b5b22ab4", "object_relation": "sha256", "Tag": [ { "name": "android", "colour": "#0e449a", "exportable": true, "hide_tag": false }, { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "Wapron", "colour": "#d9200c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736588848, "uuid": "1817f987-4da8-4a3f-ac39-aba4bc8bf73b", "value": "T152960152F36CE92FC877A0338E7A126261994C509A42D7532A1DB61C6DF7AD04F4EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736588848, "uuid": "70510946-499f-4973-a4df-7f98d5939760", "value": "196608:M9YOUvNCBHHoP1yp+taMkFv+3Du7RG/UuTTsQAu8TMXdSpKlu:+GQBHHotypbM1zCRG/UuTQi8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736588848, "uuid": "85ddab79-846d-4cbb-b8e2-e747d4dd7164", "value": 8618911, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736588848, "uuid": "425221f6-6a6d-47dc-a998-12df735fd4fe", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da7cd0fe-d001-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1736589227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736589227, "uuid": "eeb313f8-9b76-4dc8-9a73-12fec3090fef", "comment": "Malware payload (Amadey)", "value": "0d4e3ab9474332bdeabee7e40336c96d", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736589227, "uuid": "2df3fab4-ca97-4b01-918b-15253817e712", "comment": "Malware payload (Amadey)", "value": "2e620700c43444d13c22d7eca043adde1aeecf66072127947b1bca05c13d3eb9", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736589227, "uuid": "e16d3638-7554-458c-9b9d-bd79796085d9", "value": "T14195332FCB72546BE9E834325E8BE95679BD02781AC10215BC5832B3C0097557FBE2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736589227, "uuid": "1d90bad6-5a11-4d60-943f-edc0f9979bab", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736589227, "uuid": "b444d12b-ee2a-44b9-a7e7-082d29e2bee5", "value": "49152:9ZQfu77JaEODzcfDJAILDOOeSUHYWpJj/8gLQlaKLW:9ZQfu749ofDKImNSUZp5RYo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736589227, "uuid": "5d012c8b-d398-4f60-8d80-66d6649b0711", "value": 1963008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736589227, "uuid": "bbc31b61-c087-48ca-bbda-3b72b7867fe5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b13f998-d002-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736589293, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736589293, "uuid": "b74fce26-3e3c-4997-b477-e8f3a4dff128", "comment": "Malware payload", "value": "9f08d109672d30fdd700843d3518d0e4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736589293, "uuid": "3ee88898-5b3c-44a3-ac2d-23516995ad26", "comment": "Malware payload", "value": "f92fa8e4adeea867c8fd03a3951faad0c272adcf752646ecd6c80d41f66f34d8", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736589293, "uuid": "0f0a5302-5d3e-4e75-9466-a5b81730eb15", "value": "T143A4AE0266EDE9D5EFB74B31AE3AC6E46A6FBC664E34625D31543B1F05323A1C4623", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736589293, "uuid": "67184ddc-d764-41cc-a64e-3b72cc5f5223", "value": "90fb5ca8a4bfc73ddec5a22e9cf068f8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736589293, "uuid": "3cf4f8e2-cf5e-41e2-871c-b331e0f4d136", "value": "6144:Fr9JzxLAXduZCjLZ9O188Vv95qQfh9q5jk3DHpfHbGL5nWPQmzlpsG2Z:F9JzxSgZkPo8S9IV23LRuWxmG2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736589293, "uuid": "a13b7aca-d881-49f7-9022-cc34d645bf76", "value": 468480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736589293, "uuid": "3a59bc51-4374-4dcc-95b8-5e2fa2ce5384", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c91ca0ab-d002-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736589585, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736589585, "uuid": "260e0f8e-c3c0-4ec8-a0a9-c81ea7727e78", "comment": "Malware payload", "value": "bf9bdb940cc6e4352dd79b46b50b3571", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736589585, "uuid": "a906dba5-6eb8-45c8-b9aa-0b83fd960724", "comment": "Malware payload", "value": "0c00211734ff1e06b09192dec6b83048047e487eac730e959c4521d82f0f7b7e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736589585, "uuid": "495903cc-f6e4-480a-9b0b-0718174f0f09", "value": "T15C922906AA565357F972287053B32E25A07ABE32731D85CFEF80093916B0DD4FA373", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736589585, "uuid": "c8cb1e01-229d-4293-ac41-d6c1fc1ea074", "value": "ea87040ee3759f3d17459a3dfccfd8be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736589585, "uuid": "76ceed3f-203b-4f09-85b0-4e4029f7929c", "value": "384:E9S0WLc01PpR9t79yUki/ibYTJ4JVB0TAMSTRb:F5PpB7IUYYAIAp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736589585, "uuid": "fbf64c36-f36f-49d9-b186-846dfe79e644", "value": 20992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736589585, "uuid": "5716da99-aa8a-4733-9be9-ff17f75c6d8c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ea34081-d003-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736589702, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736589702, "uuid": "f8e5da3e-de52-43b0-8ecc-9d221383d6d0", "comment": "Malware payload", "value": "b8ca61b92aa936268b00d4fb18f584de", "object_relation": "md5", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736589702, "uuid": "74f915cf-da08-4a1d-a277-e316d3b2bd06", "comment": "Malware payload", "value": "c9543effa107eb8ce3fc12b92395e248180c3cc664330677a3ae8c0f9564c3ce", "object_relation": "sha256", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736589702, "uuid": "daeb5dd0-e877-46af-84f3-9bdc328f0574", "value": "T10283F593F900DFBBF40AE3BA049348157530BFA60E921A76B267789BDD360D41427F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736589702, "uuid": "1baa53d6-3ad2-4764-9fef-53ead9bd0111", "value": "1536:sXUA4jw1ne8FtCwsCgLopG7TnVpXFS0T7/yK4hxY9:OUO1nfhoLyAddT7/yK4nY9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736589702, "uuid": "42a224d7-d4d9-4e07-af03-d4d3e3e59967", "value": 82344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736589702, "uuid": "dc3d2434-8e9b-4074-9b0e-cb7a6009f616", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab3020f1-d003-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736589964, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736589964, "uuid": "12d8fa88-3b72-42b1-a5e8-3ef0097c0476", "comment": "Malware payload", "value": "4283b9ebedc388abeaafa9cea78c1b70", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736589964, "uuid": "c2aa6dcf-3fb7-43ca-92d1-0dac81d537a7", "comment": "Malware payload", "value": "d5a861959e92c8a53a516c7438448396e7e433866488b01eba69354897ed5417", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736589964, "uuid": "74f9e913-6fe6-4c7d-82ae-3a206a2780c7", "value": "T14C741251AF978E39DC3FAA3D94B20A41113057E0AB375E1B7A8C104E5BD7D4B1E22B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736589964, "uuid": "acaa77fe-9b91-4be2-b8ef-8ccafd143d95", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736589964, "uuid": "cce107d2-dc44-40af-a786-97ff78c532c7", "value": "6144:9WwfM7ZFvHHTG/nGo7P6F7zvgpkKqkKeplhz+hvHYuvErztWV4+4X:9z0D/TGfl7PGvgpkdkKe3h6Yust8e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736589964, "uuid": "294f6fe7-f00b-44a9-8ca9-588d5864c9b9", "value": 340480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736589964, "uuid": "deb62daa-01c5-4a78-934b-df11d8eb56d2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aebab00d-d003-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736589970, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736589970, "uuid": "47caa33c-536f-4e10-a13b-cd0f85581ebb", "comment": "Malware payload", "value": "243526727ec830db7c0297e29aec2a8e", "object_relation": "md5", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736589970, "uuid": "87b66547-ce21-4a7c-8c0a-fbb45347576f", "comment": "Malware payload", "value": "eb4e62809ef2c5289e0fd2a7fe9900d49c7fee18d11f883dbb0149f5b9d1ab25", "object_relation": "sha256", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736589970, "uuid": "d3c8cf8a-3c4b-40f4-ad60-03f66e9839a6", "value": "T13D93B52B7B131E23C0D610B152F30632B8B9EF5938BC4697A8E07D9D6F3698431567", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736589970, "uuid": "8e7feb9f-7d73-47a3-bcfd-d1f0294e92e0", "value": "1536:A3Hw0NP53Bw1FAyQN95gr5MtB1VbtQlCsPH:tGPwvXQNPgr5w1BilbP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736589970, "uuid": "a68e93c3-7ef3-4cee-a3df-3d059f71176f", "value": 89304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736589970, "uuid": "44ccf516-aeec-441a-ada3-5eeb8b630082", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72a50d44-d004-11ef-afe5-82aee05be84a", "comment": "Malware payload (Xorbot)", "timestamp": 1736590299, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736590299, "uuid": "dfadace0-9ef3-46dd-b273-8a7addedf736", "comment": "Malware payload (Xorbot)", "value": "c1f46368f00d5705c94f2ff46c3cdace", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736590299, "uuid": "5049af57-6000-4a8f-a999-d0b24418abec", "comment": "Malware payload (Xorbot)", "value": "ee6c411a11ae00a718e82d5e496a33cadd0189b3dfa141b10e67fd1d30236a63", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736590299, "uuid": "1e293ff7-5ce9-4b65-9033-c7310466190b", "value": "T1A922CDC633806071DA81CEC1A634EAA0F465F4C1E8D76FCDD0CBAC9A6149EF6F8C5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736590299, "uuid": "3f19e1b1-8a02-4435-8300-a5103f4ac307", "value": "192:LM3jMBqZ5cMswet9LAvAfAfAcAQAbRswet9gAvAfAfAcAQAW3jsqS:LbBqZ5cnAvAfAfAcAQAbHAvAfAfAcAQi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736590299, "uuid": "f00f781e-00ac-419d-ad40-965c77c67397", "value": 10578, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736590299, "uuid": "aa64fcb9-f853-44cd-9568-2886eaf4d8f2", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77f7f290-d004-11ef-afe5-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1736590308, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736590308, "uuid": "298db9a1-21b5-4f7b-b04d-5f1dbf7dff1d", "comment": "Malware payload (GCleaner)", "value": "012ee0532be09fa731f4907e37d257ec", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Nymaim", "colour": "#9738dc", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736590308, "uuid": "bae3b148-9319-4fd6-95bc-1d347b044b3c", "comment": "Malware payload (GCleaner)", "value": "821c0e07a4ccb41effc0cd749bde54d15e5012c10cacfd7628b7e725af50480c", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Nymaim", "colour": "#9738dc", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736590308, "uuid": "493eda1b-9c9f-4d8e-8617-21509a00971e", "value": "T11A95331F646616DDE8F23BB7E03AC4342DD261E95C00796701829934FC8CEEB96D7A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736590308, "uuid": "7cb6c75e-1e42-419d-9c29-86564cbf89c7", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736590308, "uuid": "22a43510-16d7-47eb-87fe-76415a12a221", "value": "49152:tcDUHlOht2l0UTd/hZ/zzn9J8f2fhjvwPaCjP9hWNi:vOhAOUTd/hZ/zR7tq7WN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736590308, "uuid": "8abe022a-d037-4cba-b304-d5e22b929abb", "value": 2001920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736590308, "uuid": "44e19445-3efb-4de7-8493-fc0e2d78394f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bfa32a61-d004-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736590428, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736590428, "uuid": "ca0f11a8-265a-4994-a1d1-b7de8364fcb0", "comment": "Malware payload", "value": "eecd913b85c7ace3a724d2557016d683", "object_relation": "md5", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736590428, "uuid": "e1645391-34de-4fe8-9eba-5bcc3482d988", "comment": "Malware payload", "value": "f3f07a90d375680c2e9bc80210f3de441e4fb0a86d28510848522ee6ef92be56", "object_relation": "sha256", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736590428, "uuid": "829e6b7f-f71d-4930-b5ce-e45822cd0511", "value": "T123F2E14ECE31385DDBCE2A3208AA2355CD64F09672DE878D4B01DA06357E54BB8D61", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736590428, "uuid": "72952e3d-c83b-4f3b-aa4a-8e4174368fe4", "value": "768:hf0qkhqs2rqTHbbLSYMiV1V7egNrN1GI8+M8mlwQ6RXhbWRD:hMqkhZWqT7/DM4eEgl+M8OGRXh0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736590428, "uuid": "c2a39c66-0c6a-4f72-b1b5-7f4845fbbef2", "value": 37140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736590428, "uuid": "af6c9ece-9ee3-4fa7-8f7d-4e92cf7269db", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c83fdac4-d004-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736590442, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736590442, "uuid": "a8d6c388-752e-4fcd-b534-f645e1d86b9f", "comment": "Malware payload", "value": "078640533383c3e65d8b7b7c3e00d97e", "object_relation": "md5", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736590442, "uuid": "674f23c7-73d5-4926-ad3a-7620cb3a5975", "comment": "Malware payload", "value": "8d80c98ade1dea7b6914c9d1bbf92a61b73e44e39328a84882dd95305b9d1cdc", "object_relation": "sha256", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736590442, "uuid": "20e22adc-dc8f-4f01-959d-07e2df43ebb1", "value": "T11AE2E110BB1940C286F31A77EFFA060636E79EBCEC5239E573B64C10B7A420756B65", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736590442, "uuid": "154a94e3-32c7-41f5-8cd9-373c4b067bf0", "value": "768:Wwj+mUOeL+LnJTs/TBAGPoueNLrYmxCgkO43Ui:Bj+PLeJTkSPHNnYmxCkg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736590442, "uuid": "c72c0e21-2ef6-45cf-ac67-6473342af4ff", "value": 32172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736590442, "uuid": "9ae0abc5-7e84-4216-acde-63df4b9e96fd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "183d042d-d006-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736591006, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736591006, "uuid": "53e1f344-2baa-4650-b534-c8df2aea6e2c", "comment": "Malware payload", "value": "f87f6b572133f29f76d99f1776786d1b", "object_relation": "md5", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736591006, "uuid": "9a040fd0-4ac1-481b-b621-bf1096902283", "comment": "Malware payload", "value": "54a53a8103d8563f5f14f4398a73bd5e7b6f658ed87aefbe3353b5a29fd549b4", "object_relation": "sha256", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736591006, "uuid": "1c2aea60-ec77-46a6-abd9-96741bfa0557", "value": "T14E7318869A229FB7C016F4B065B55D700B26BC222A6F19D97439FAE0027F5CDF10B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736591006, "uuid": "0376ec00-db45-48cd-9954-e1a73379408a", "value": "1536:6UZq5aKoxlNPwuXGKi3U9eadooXrrlCfio:6UU8KYlNPBX5iRadhlsH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736591006, "uuid": "3e129163-d587-4472-9d0f-821e5d734e39", "value": 74280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736591006, "uuid": "6576f288-5fc5-4a78-8329-2a5cc3d7e3aa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a45caa86-d006-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736591241, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736591241, "uuid": "320cafeb-e762-4de0-8358-7e70653580e7", "comment": "Malware payload", "value": "e51fb688a4b493502aee57f3ed67df9c", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736591241, "uuid": "026dc6c1-0a77-4879-906c-807a16fbb039", "comment": "Malware payload", "value": "23e4381bfbbb3c59802193bd1af71dfd6e36a2f7925eac940916fde559f84b15", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736591241, "uuid": "ee730f0b-15b3-45b2-888b-201070a2db07", "value": "T1F047CB8C0EB65EF8F225E01723616BA6E449241FEF453BD8F64D71AC9F04085FB9C6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736591241, "uuid": "2b4007d0-768d-43f9-b568-38b829b48d5e", "value": "49152:Ubjb0T2gfMtGs+ud5M2Dpd/W3XZTvjpHHplwrj:Nu/MEdS9plwP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736591241, "uuid": "e15d14c2-6039-4368-a84d-4090ffa001f1", "value": 25420728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736591241, "uuid": "2c5cab0c-56a4-469f-aa75-f9856e3ccfae", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc5e1a4d-d006-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736591308, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736591308, "uuid": "4187ad84-0e59-48e8-b61e-89f9a9611afa", "comment": "Malware payload", "value": "d3e16e861e558b4ef1cab27daac58085", "object_relation": "md5", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736591308, "uuid": "48719e79-c04b-4fc1-8dc9-919698457416", "comment": "Malware payload", "value": "a8f98aa6a8af1faf4e9a08ddc8f387c4a508e5c30b19ac21976257a6e46dbdea", "object_relation": "sha256", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736591308, "uuid": "820cc33e-c20d-4df3-8211-706395c96d55", "value": "T195E2E124C2D65CD4FDEE1CFB40C6C3C176E09BAAA19B8FF28141E750659261FA817E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736591308, "uuid": "458c686a-18f1-4145-a4bd-5643e44199d8", "value": "768:47QBRD0URPhvyWiAY8k33jfghLoL7R3eIMX7i34uVcqgw02NWX5m:66rBy7AY8kjsL07R3lMX724u+qgw06Wo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736591308, "uuid": "e544e283-8fd0-44db-b6d1-da80eb7c75f0", "value": 32960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736591308, "uuid": "01129955-b784-4813-9b63-5aeeccebce59", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23de8393-d008-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736591950, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736591950, "uuid": "5f63f5b5-9c6b-44e6-90a0-107e56b38994", "comment": "Malware payload", "value": "72cd374fa8392aed8273fb846f73a3f1", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736591950, "uuid": "8874e966-8bec-489d-9ab6-90b07ef9e293", "comment": "Malware payload", "value": "32d595fdd35d72ddeb2c784023da310ede4d77b43663608503d51c5ac8af1d2d", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736591950, "uuid": "32052ea8-27ba-4b72-b05b-8d5385e8b693", "value": "T1E37412F7ACB86951CE0586FC827134925C8EEFCBAD6E1D76C9BE2974798411034F08", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736591950, "uuid": "6a79f4b3-09ef-4216-9c14-95cfcb7bef87", "value": "6144:tEVKPlI6hzy/t2eQ7ssPhW6hzSr169uva69JCENhGZqAmyT:N81LQ7VuI9uva0UENhGZkyT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736591950, "uuid": "06b0737a-bd08-439b-9446-f9924010b5fd", "value": 362450, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736591950, "uuid": "097105bc-e421-4248-b025-6953896bfe68", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5bff8f10-d007-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736591979, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736591979, "uuid": "0e5b6d9d-f349-46d9-a41e-d1dfac9f4267", "comment": "Malware payload", "value": "eff09851b4f0c0b0d0898a7764ba214e", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "TgToxic", "colour": "#55a911", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736591979, "uuid": "cf9ff405-1588-4e93-b124-0d183a1c6c26", "comment": "Malware payload", "value": "85d951495e2c93317f43cafc1f42bbc85faac0c8f7e49131143e8d8979108deb", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "TgToxic", "colour": "#55a911", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736591979, "uuid": "9532a5ea-c16f-49a4-aebd-949e7cc89393", "value": "T19036D042E35C567AD5F313B64CBA4A62210B4C916B43C783A8247B3E58771D84FA7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736591979, "uuid": "a497485e-5ee3-4b7d-aef3-1b8655f0716e", "value": "98304:e3mUMdkaoLKauoh9eDe1FqCMITPJ4FcOOZ2zQP2kj:e3mUEpauoeD5CMITKF2Z4uj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736591979, "uuid": "e9ffd8b0-5a75-49c1-851e-2be4a6464974", "value": 4919985, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736591979, "uuid": "69bc1af3-cf69-451b-811b-b79bfcdc55ea", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d882aa3-cf3e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736591981, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736591981, "uuid": "0c8a539e-c213-4fbd-ab60-4e93f91f486d", "comment": "Malware payload", "value": "334bd406e6f32668f93073297d048a61", "object_relation": "md5", "Tag": [ { "name": "android", "colour": "#0e449a", "exportable": true, "hide_tag": false }, { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "Wapron", "colour": "#d9200c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736591981, "uuid": "3c74ead8-97da-44a6-b507-cbd4e545644e", "comment": "Malware payload", "value": "d4e2767bbbeb2fe30566318d556a890b73863e18498ddbdd441f1946c080f728", "object_relation": "sha256", "Tag": [ { "name": "android", "colour": "#0e449a", "exportable": true, "hide_tag": false }, { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "Wapron", "colour": "#d9200c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736591981, "uuid": "ed022ef7-ddf2-4ee0-b64a-b5d1add63a4b", "value": "T1B4960156F36CE92FC877A0338EBA127260994C519A42DB53251DB60C69F7AD04F4EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736591981, "uuid": "08179824-f6ec-4b25-9f52-12b90a98a9ef", "value": "196608:xm8ozX+PeuE6tELuunNd2VZnM/3Kj3Du7RH/UuTTsQAu8TMXdSpKzG:mzX+GruydwZne3KjzCRH/UuTQiG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736591981, "uuid": "c9d8bd98-8986-48bb-a1e8-20cc155dc705", "value": 8619871, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736591981, "uuid": "332b780c-1c32-4243-8371-91b2e5616aae", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57110523-d009-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736592400, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736592400, "uuid": "aa0800aa-48e6-411f-aa43-3e8012934107", "comment": "Malware payload", "value": "88520295d17f287fd127830bb766712a", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736592400, "uuid": "c2eb8405-2f72-49dc-8169-81f0f88c6e9e", "comment": "Malware payload", "value": "3e376b0722ed209898a1b3a93a6988c4ad2f6e35083c07dc9e486e3da55c88ed", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736592400, "uuid": "51dc8d3f-007a-4ecf-8b71-390241097513", "value": "T127B47D3140137C5E3BAA2ECE64006EC00C5939A7BB54D150AE899276F2BE53B5F6D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736592400, "uuid": "e16cf53e-b348-404b-8f20-e40453200c4e", "value": "6144:hkYzSm2MYa1Qdgzkqs5u0uXrRMnfB3sBVy8ZK5HKceYWQLJgvF/9EoQ6GsbwMI5g:srSZ2h7dVI42CoeUJ2z6m20QFqwg2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736592400, "uuid": "995fa276-d684-4fa0-96c9-62ef36c621e9", "value": 538493, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736592400, "uuid": "0a6a270c-6981-4808-b67f-f61c35173e10", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1da4bbc6-d003-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736592927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736592927, "uuid": "d3d7f0f6-2562-4849-a500-93427d35d299", "comment": "Malware payload", "value": "dcc4f0d243cea663786ff7329e49401b", "object_relation": "md5", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736592927, "uuid": "b15cd688-7f7a-449e-893b-a41fceb71747", "comment": "Malware payload", "value": "3d36bf595169b9a75616741e9a737659f286134a050fe628d1e1192ec48fac4b", "object_relation": "sha256", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736592927, "uuid": "f790d94b-4d9a-4280-8459-6f9e31eeaef6", "value": "T149263300780215C2F8B366F07F315E7566FC93A276746EDA3832665013E9786BCCDA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736592927, "uuid": "e28102f1-343a-4f64-ac6c-1d04ccb80c16", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736592927, "uuid": "da01d37c-cce1-442e-aa2f-01a0d7770a8f", "value": "98304:kfbQb863+ClYSZ5Y5vMULd3sSPhYc2x4mRsR+:kf8OkdY5vMId3shc2amRsc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736592927, "uuid": "60a67b59-5505-46b3-8194-26a26dbe5a08", "value": 4459008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736592927, "uuid": "7d1ce564-aedb-4b26-9a9e-f9e51faefd05", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df82b78f-cf50-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736593006, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736593006, "uuid": "5a1eb061-ec2d-487a-906b-cb2b0b67c6b0", "comment": "Malware payload", "value": "804ed17e8bcb7f175dd824f5ace15228", "object_relation": "md5", "Tag": [ { "name": "android", "colour": "#0e449a", "exportable": true, "hide_tag": false }, { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "Wapron", "colour": "#d9200c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736593006, "uuid": "9052bf73-56dc-413d-a0a1-01d8f2fa90ea", "comment": "Malware payload", "value": "fc6b26222c64be99dfe3c050ee3b345d19da2f2109884fabd1c15edaf4d9b755", "object_relation": "sha256", "Tag": [ { "name": "android", "colour": "#0e449a", "exportable": true, "hide_tag": false }, { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "Wapron", "colour": "#d9200c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736593006, "uuid": "c726253a-cfb7-4615-9f3d-5cc33ce8c276", "value": "T1F1960152F36CE92FC877A0338E7A1262619A4C509A42E753251DB61C6DF7AD04F4EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736593006, "uuid": "99ded961-c014-4ad8-bcc2-a9c96c4d3ff5", "value": "196608:6EnxzyxyHKdqyz/T/b4sM3Du7Rw/UuTTsQAu8TMXJQpKlC:6EnxzdHKd5DgsMzCRw/UuTQi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736593006, "uuid": "c3938490-e63d-44e2-b698-b747f8b2bcc8", "value": 8618255, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736593006, "uuid": "fdc80565-b37e-4da8-903a-45f273ac149e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "166c1368-d011-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1736595728, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736595728, "uuid": "cde05251-cfb4-4a52-96fb-e7f33f75f5f3", "comment": "Malware payload (Amadey)", "value": "9f5b29321f0f16a2c6fa08b6b9044f4d", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736595728, "uuid": "29efdf7a-4467-4237-a7c5-c4ef2df84a04", "comment": "Malware payload (Amadey)", "value": "6b39b86e7c822f35e878c87f6816f9e793875ef7bb6342af372177a258574fd9", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736595728, "uuid": "1973913a-3ceb-4e00-9e0d-589e6aaba642", "value": "T1119533FB05F333BEEF83CE308D379199227D874AA1A29BC17FD1BA455025E8599C68", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736595728, "uuid": "9377cdc1-2d92-4820-8709-4fcd9ac65273", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736595728, "uuid": "2b97b84e-5408-4e36-ba5b-a5a365d791f5", "value": "49152:/K9F4/XfY0sSVKH81CvZ13LAynpI/s1aylCTk:o+XvVKHdP3Hn2sbs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736595728, "uuid": "b624e704-ac2b-44eb-8c34-e3f0980db679", "value": 1895424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736595728, "uuid": "c28ca4c7-c636-4f9b-994a-3524ba0508ed", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7bb86d98-d012-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736596327, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736596327, "uuid": "d1446c1c-ad4a-4c2a-8aeb-f3f8b5269888", "comment": "Malware payload", "value": "a4e4f27000847767c219e58638844032", "object_relation": "md5", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736596327, "uuid": "69f96061-8f0f-407e-896e-89ff43225e42", "comment": "Malware payload", "value": "59bdb48ccabeeb17e5e2f8fd5e3e66cf4cb3e9c16bd9464a92537581c1642aec", "object_relation": "sha256", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736596327, "uuid": "550e0f49-189a-4701-872b-6074be44ea5f", "value": "T17CE2E131E3B68688F39452361D7BFBC65DB0EA30912904F4EBCD3272CC6276726503", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736596327, "uuid": "ef9290c4-8921-42f0-a91f-e5e5269f0d53", "value": "768:zEYNuRfMfuNyfssOp9uB5bZ65OsoLdtYX1iknbcuyD7UryqL:AWifMfuIrOp9u9LswoX8knouy8mqL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736596327, "uuid": "fb2597fc-5895-46ba-a45a-d480735b1cbc", "value": 33040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736596327, "uuid": "49aea561-256f-4a21-abe8-120fe6bc529e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d9c2887a-d013-11ef-afe5-82aee05be84a", "comment": "Malware payload (Xorbot)", "timestamp": 1736596914, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736596914, "uuid": "af4f5c94-c74e-4ce5-a7b4-4d2cadd9f106", "comment": "Malware payload (Xorbot)", "value": "c62df942ec20d85d3f4a1b4320a3fbef", "object_relation": "md5", "Tag": [ { "name": "37.44.238.67", "colour": "#c4bd8a", "exportable": true, "hide_tag": false }, { "name": "37.44.238.75", "colour": "#3E8279", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736596914, "uuid": "dfc3d035-ca3d-4949-9dd1-14e58285ed9c", "comment": "Malware payload (Xorbot)", "value": "05c93875e1553450db614dec5dacce26d69f5f498f2bfe5cb8e32481cdcf6f4c", "object_relation": "sha256", "Tag": [ { "name": "37.44.238.67", "colour": "#c4bd8a", "exportable": true, "hide_tag": false }, { "name": "37.44.238.75", "colour": "#3E8279", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736596914, "uuid": "8f4be830-10e3-4fe9-ba23-03edc5f73125", "value": "T1BF2215C5104802252C71DB9A75AE1CD0952C7A859DD89B3ECCC83AACD44EEFF35CAE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736596914, "uuid": "6b9f99ca-f18f-4cd9-89fe-68293a553acf", "value": "192:HcyHdHhH2HXH/HwtvpUk7Oa/O2gUk7OaDPHdHhH2HXH/HwK:HcQFxc3/wNpUk7Oa/O2gUk7OarFxc3/V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736596914, "uuid": "34df77ba-b3f1-4060-a2ed-6ad40ba5b3b3", "value": 10830, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736596914, "uuid": "c4490a94-d6d8-4d0c-8f31-b35102aeab0e", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd76b080-d013-11ef-afe5-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1736596974, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736596974, "uuid": "0be08b02-0e64-4c8d-b876-807d3e87e88c", "comment": "Malware payload (Healer)", "value": "eabd18c8495566bf516a8e4de1d85fbf", "object_relation": "md5", "Tag": [ { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736596974, "uuid": "17a6f035-92fa-478c-85ee-0c9a486a5a7e", "comment": "Malware payload (Healer)", "value": "b74b07211f85d033760c948b8b35a453ebd1f8e95a3daf706f8b3c8bc0617ecd", "object_relation": "sha256", "Tag": [ { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736596974, "uuid": "24e19d57-8272-41d3-a5c3-b49bb0c04e65", "value": "T1128533847C6B8877C16FD737851ECA873A689639607AF547E43F6D91C0F2A8C82B5C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736596974, "uuid": "e8f02d63-09aa-432a-afdb-7d642679acfa", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736596974, "uuid": "8e4ac501-2cc9-4f3c-9d75-4a66c347fdc3", "value": "49152:mt9eR0tEdDMjSeQ+1LUsw5xTFKqxA/zO4VPnCWcm:eS06NMWnF96dnCVm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736596974, "uuid": "f27fb186-a222-432c-b5ed-e6fc40d28f57", "value": 1745920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736596974, "uuid": "c0d27e7d-3116-4161-bb01-0bdaed37ca1c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62887151-d014-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736597144, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736597144, "uuid": "9d997309-5bc4-48c7-962c-4e56e75676f7", "comment": "Malware payload (Mirai)", "value": "8dd701faf03e825b4c34aa0ccd6888ef", "object_relation": "md5", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736597144, "uuid": "d0be6d07-fd71-49a5-801f-cdc02838e283", "comment": "Malware payload (Mirai)", "value": "2cd511b100356481d2bf39926f02f5e1fd027c9f3fbc5f250d45c23cffb69742", "object_relation": "sha256", "Tag": [ { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736597144, "uuid": "b786cf52-0412-4176-890a-751234441d49", "value": "T1F603F2A7BD2499B1E471AC21D617920390B53EBCC1DDF9E3780C8F44DED7084A52A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736597144, "uuid": "cb0c3222-1bac-4a16-a643-0f92ddb96be0", "value": "768:hCh8EqDrkq9GeOyrdyxyfMwWj9wh2cxc8+XqREzLPLRpgjq3U7p:ha8EarkELdrdyxy0rwHxc8iqREfLRaXp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736597144, "uuid": "28372e51-6594-4005-873f-d19d04e0e65f", "value": 38660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736597144, "uuid": "76179558-c236-41b9-a9b6-d79cfdc8afa4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ad44d03-d012-11ef-afe5-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1736597209, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736597209, "uuid": "6689b30d-4c3b-4fa3-a7be-38e82c11e045", "comment": "Malware payload (Stealc)", "value": "7c3e03e3adfa97817e1b184b4bdfe68e", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736597209, "uuid": "c323f9ef-ca9b-4aa2-b823-f893a40fa787", "comment": "Malware payload (Stealc)", "value": "ab01285ddc93dc762aba3a1330473a84f132733432438baa21f2b26cefe275ee", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736597209, "uuid": "f257e240-a005-4d45-84c7-32579397d447", "value": "T17F85333C68B26727F3F4A0381D3B0F7E531D1B77CAAD6018629451E8779EB218C965", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736597209, "uuid": "de4611cc-957b-4209-b385-0abcf3584f8a", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736597209, "uuid": "705343cc-fc2e-4993-ac5e-e469db2df270", "value": "49152:r162nbpm0VEjrZ6LuAMOF/L8XKy2TdjSrKl14L1J:h62nb00Vgl6LuAMOh5y2ZjVl1U1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736597209, "uuid": "dc7f253a-ce3a-494f-b05f-f4e95e8c3e30", "value": 1844224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736597209, "uuid": "467ab0ad-116c-4eca-af8d-ffca57730309", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16287d1a-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1736597832, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736597832, "uuid": "e1932e01-2671-4d33-850e-f70c40609b6e", "comment": "Malware payload", "value": "ee9986b9d1c62cda420b671c6def4efe", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736597832, "uuid": "4b54c273-4913-4763-8228-cbf385ef2180", "comment": "Malware payload", "value": "20c9c9e9153564ee44ab7fa7bdb571956245c08859844048df1e8b8771505eeb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736597832, "uuid": "d9c1c90f-fd8e-44b6-bfa4-eb7c5268f92c", "value": "E123018623663FB3D13158F5E7FCEF85A14A7D94AFE6180A7C227698A07135C28C8D1D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736597832, "uuid": "47a32237-3cad-4032-a5f1-5f4d564b471f", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgsK:yYI0ARqw1qAEv7UIFM8oJorFK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736597832, "uuid": "3a7ced01-e1be-449b-93f2-b9ab8e36d9b3", "value": 49232, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "690b19d5-d016-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736598014, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736598014, "uuid": "709d581d-b2b7-405d-b9e6-ce9a26e804bf", "comment": "Malware payload", "value": "cab37be502dc4b5df7bc566e521a371c", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736598014, "uuid": "e337749d-38a7-4f49-90ef-4e1aa1a95c6c", "comment": "Malware payload", "value": "f1b8d2f0f69153cdc57bce7eb5830a04b2a966afc2874ca5ac41bf33017ddec1", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736598014, "uuid": "4f95df78-79c8-4661-8887-b0a1179e1b43", "value": "T1A634F01C34FC6595B257CA2EA3BFFC6B8D02879D40B1D51627CC25F0B898E91B6D2E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736598014, "uuid": "b43848ff-4eab-4f44-98c0-180cd774acc7", "value": "6144:Yq5i/I6pJct/pGd/9E2T1YwU/Fi/o0HLCDPy:tkkR2ZYwU0/rU6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736598014, "uuid": "b1bafec4-ff3f-4346-b7b7-30532cb8d3c9", "value": 247900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736598014, "uuid": "fed0b9e7-d005-4402-82bd-2c65caf3209f", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02168a1d-d017-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736598285, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736598285, "uuid": "2b62d4d4-cb55-4f60-9353-4b8c3a1f15c7", "comment": "Malware payload", "value": "99d3d9edeb03951f8336599b5ceb9d00", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736598285, "uuid": "e137bf06-0e27-4df2-a6d0-dd738cb9c5d8", "comment": "Malware payload", "value": "73d8ac2952c64e91f286b9017711cbc24da301d59df6838f6566ba7b10756936", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736598285, "uuid": "16194b3e-13d5-4b37-a320-459a3a623180", "value": "T1383533F2F66A42C1EDC304B865AF60844F5F3E430E6650C901A7976168DEB34F66AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736598285, "uuid": "49a1c7e9-b1ad-4165-b676-309d0d2f468d", "value": "24576:bU4LIbE0XwjL27lbk6Pjc8zmRWZbRf8nxWfWncgbhFCUGoy:bnE8Sbkujc8DZ1fUW18hFCzoy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736598285, "uuid": "c77a9fbe-93eb-44a7-9413-4c6c7e57aa8b", "value": 1158893, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736598285, "uuid": "c8076a32-4760-4cc2-8883-dea417e1977f", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43e1e403-d00b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736598440, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736598440, "uuid": "34d2eb6a-410c-4156-be4e-559cbda3a16e", "comment": "Malware payload", "value": "7557ff100a799ef4a5e2e5baa732bc87", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736598440, "uuid": "f2e204d2-8c01-41a7-b979-e14b36e8d0ba", "comment": "Malware payload", "value": "735f68489c5c0101686375a29666bd50ce310bbfe03af08fd5bd4ac6c7ee87b0", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736598440, "uuid": "dfaee5da-6108-4dcd-abf4-3d6ab04594a2", "value": "T13522AF5B09132E7EE4BBC7997F1DFD24A47B45F87A11488D3D15320FA4432968167A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736598440, "uuid": "98e5168c-4280-4796-b782-601d6a85f11e", "value": "192:bLk2px1FuP/WJ1CU5OaKSwEoUw6erXB06r5zWdaasuoWjm4oMkNOl8l:bL5xTwWJQuFKSjed/rwdJz38Oml", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736598440, "uuid": "a787dd08-5616-4028-af2f-5c05b7aac6af", "value": 10496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736598440, "uuid": "b8173c1b-587a-4788-93d4-01b0c12bb0b1", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0ed76a6-d018-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736599294, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736599294, "uuid": "3a5167b4-d322-4080-9ee4-e290c30a3fb6", "comment": "Malware payload", "value": "2144521d3c89f03865b4b3ae8faab597", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736599294, "uuid": "915cfe87-7ee8-41cd-8183-6bb0aac71ee5", "comment": "Malware payload", "value": "e5106068dee133214755080393e506e714ad5034fdd8416497935f0febc283ef", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736599294, "uuid": "584e962d-fc08-4690-a5c6-6eca631eb507", "value": "T1717412BA786C3E91CE1499F849396DA54CCFEEEB6DC90557CCBB2D982CC021178F44", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736599294, "uuid": "0bd5c944-b2f8-4a11-ac54-2ac10ca0d21e", "value": "6144:RDCs5K8s9PPJ06hBSxXMbu0PtC6hpSJboBRazO0AZokFbtYT:R/wpyubu0kZoB2O0AZokVtYT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736599294, "uuid": "0d13b696-3a58-4f3a-808b-40dc204b67fc", "value": 363060, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736599294, "uuid": "1c573c78-c2ea-400b-8d02-d173b50278be", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bbda3961-d01b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1736600300, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736600300, "uuid": "52c7aa97-a658-4f92-9732-9705f687310b", "comment": "Malware payload (Socks5Systemz)", "value": "d0fa3e20a88d767b149655036308fcec", "object_relation": "md5", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736600300, "uuid": "4e34bf2e-6b90-4209-9f93-97c9747f5a47", "comment": "Malware payload (Socks5Systemz)", "value": "f3632f686806ef3ac4632215aeb10027e08b17c0250f717ffd8bfede05a57bf4", "object_relation": "sha256", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736600300, "uuid": "57157e26-1ff3-48dd-b19c-42c7850371da", "value": "T1F2F533C096E091BBE22295F089A2C1505717FE3834B8113171EF6A0D5E5AFDEE15E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736600300, "uuid": "a13c0117-e05f-41c4-ad2a-293de53fc3b3", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736600300, "uuid": "4c6c3d30-f123-44e4-9c4e-24cce56d54f3", "value": "98304:MkrGdZQEpe2Z6P335ckAKthRWrLjeLjyhKqRXjR4im:wZLr433rJthMr+yhKqBR4im", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736600300, "uuid": "bd246f7b-989a-44cf-ab2d-609ddbf7cacb", "value": 3540907, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736600300, "uuid": "2c1dbf05-490e-4c01-a3a6-fa493bc4cdc6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e52f0519-d016-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736600494, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736600494, "uuid": "0b00cc4b-2aea-40fb-ab34-7cb5ee156d0a", "comment": "Malware payload", "value": "a3a6afff7896af26d0b5cceddf6ce364", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "TgToxic", "colour": "#55a911", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736600494, "uuid": "453cb612-cdda-48c1-ac05-2fbe36489f85", "comment": "Malware payload", "value": "9506d246da28c2ec91b568089ff0391601def2b12a91f0fb6449d8c13ed29501", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "TgToxic", "colour": "#55a911", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736600494, "uuid": "6b2342ac-84de-401a-8362-85b1f8280cf9", "value": "T11C06BF8A7F444919FCBA81F11DAEB235D24EAE4ACD06C2DB6E06370C16B77941F4A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736600494, "uuid": "d499320b-c96a-4be6-a9e3-a0dccebc663c", "value": "49152:CgWNwiy8VlJ1mZtNo1BOM1duFr/nNebPXoLmJj+1fOGnRnJzzvv/7cj00o/fM:61y8VlJ8A5XoIiOUfLDcjzf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736600494, "uuid": "5c0e8082-8de9-4dac-8628-c1a4b35f1a31", "value": 3668492, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736600494, "uuid": "34e41319-d93d-4f3f-ad15-23c56392f406", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46c0a4f9-d01c-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736600533, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736600533, "uuid": "3289574f-1dd1-4cd7-9e82-e4e8f9614634", "comment": "Malware payload", "value": "fce6016936bfd5577fd1152049b7310a", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736600533, "uuid": "3e78bd39-4c2c-4951-a17c-49da6e984c84", "comment": "Malware payload", "value": "972b0853c5b847c22180bd09238819dab9ce7e94c6aacc9bf069fb090fa7eb13", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736600533, "uuid": "4d061a08-2cae-4a48-ba93-9afecc4645f2", "value": "T1E8453378A242CE47CA11577B6C0D196607E3F99131D09F887BE93D0E9F10C876B786", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736600533, "uuid": "986bfc17-c331-494d-a1dc-b60929842119", "value": "24576:ldlejXO95NorTSqGx0cAj/Ko3ibh15bvLoHcDjY294tcRqKKcGHV:luTQ5NorTHGxnUta5bvLokMbHKlEV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736600533, "uuid": "7c86867c-a126-493c-b73c-18c31130cecc", "value": 1232206, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736600533, "uuid": "da68daca-850f-4acb-8ab0-5c4de0eafb31", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a59b359-d01c-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736600539, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736600539, "uuid": "d671c909-c1fa-4f92-81fb-84cce9e28a03", "comment": "Malware payload", "value": "15d502445cbb3d62df4a4074540403aa", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736600539, "uuid": "0d3c2110-948e-4d46-903b-fa6a29d4d7ef", "comment": "Malware payload", "value": "1fac9ca9a6b6c22d29594acdefb0724921b8eb6a315651dd8a95f9f02991427f", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736600539, "uuid": "a80b4685-93cc-400c-9ef5-a92b879f193a", "value": "T14B9533BC1F82C597D923E3347957CA4027C96157E7AD5D0C032EA63A29A933CE1CEC", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736600539, "uuid": "e7075c27-ae2e-46f9-83cd-df023dc4795c", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736600539, "uuid": "29508cc4-a89d-40de-8bfa-d88935d8998b", "value": "24576:N08ZagskIzQz4gud8MFSMBYg+2kaf9CdIZkS6eK1qjxCvUUpqC72CR0Ey:N08ZahzQFmTBYjadkJicvnSd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736600539, "uuid": "cf64c093-7069-4eab-9897-57e871628715", "value": 1900544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736600539, "uuid": "2f01b02e-d970-486b-b1e1-32c5d0c29ec4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f1c3326-d01d-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736600869, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736600869, "uuid": "ee2b4dbb-aa12-43a0-984c-88f740626213", "comment": "Malware payload", "value": "a974364a72adef9cdf8b2b63a8b3fd7a", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736600869, "uuid": "5cde655a-7d81-49c4-b66a-55629a6dbc8c", "comment": "Malware payload", "value": "69e6a7be15ff11425c06d326b0f7f10589c8adacc69c2ddbaaba180b1d52d55b", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736600869, "uuid": "0a053b70-a6d8-4bf2-8e66-b9f6b81898e4", "value": "T1C853E97766623E0D9233480CB8C5B6C87718C453D4075AEDE9BAA62CC3CBDC691727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736600869, "uuid": "ac025696-1461-4f4b-97c2-503e54ef7ea4", "value": "768:aA1fho1SnvHgRNv+f5AfpUxnHeob4f1u0eJwO0H+UJF/dhPR1X1t1RB1p+dT2sAQ:aA1fho1P6n2PPR1X1t1RB1p+dK1a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736600869, "uuid": "ef934dd5-2e1d-475c-a1d2-197d2c1750ee", "value": 64430, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736600869, "uuid": "4422b392-46b9-4988-a635-c9cf1451a0e6", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33a5e0d3-cd79-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601490, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601490, "uuid": "89421c47-8d67-40aa-a37d-0d48ba6d2753", "comment": "Malware payload (Mirai)", "value": "7e6b27a69629a17ee6dec17dfd4a9841", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601490, "uuid": "82599864-c39c-4310-9af6-8c3c3f517217", "comment": "Malware payload (Mirai)", "value": "769bc3cb8384b94e81dd1391cf9b2437685ca1456b14e35c19098f4fafc7f2ca", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601490, "uuid": "6b8a3daa-d3b0-45c2-8ba5-0848503544e7", "value": "T153A34B86B400DEBCFC8BD73B41170A1AB331B7555F422676B353B93BA9640D46D2AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601490, "uuid": "1777291c-bc74-4507-9262-16069bf57f88", "value": "3072:t3AXhF2HHDsZOn5kFLyzPisOCVcyf09baAU:YF0d6yzqsOCiysRaAU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601490, "uuid": "c7ce7c51-b76a-4ef3-aaf5-f7acfd1c26fc", "value": 106664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601490, "uuid": "07bc5086-0f49-42ef-96cc-3ae742105aa0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f60774f-b6d8-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601490, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601490, "uuid": "a34d6cd9-4a98-4602-8ae1-3abe610c7360", "comment": "Malware payload (Mirai)", "value": "9ca09deddb09ce47cfb0295866d17d4c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601490, "uuid": "81211b37-1d82-4461-9c20-ed79d5d7b7f4", "comment": "Malware payload (Mirai)", "value": "da870712583aab4f2730ada63987713bde3e2482e0a37dd410a05e0429776ebe", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601490, "uuid": "f2220fb1-6c47-4608-abac-186a886cbc2b", "value": "T148734B41BD819A13C6C112BBFB2E428D772753A8D2EB7203DD259F20378B96B0E776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601490, "uuid": "d0ad3424-2a9f-4d4b-89ee-c0e7c69c7ce5", "value": "1536:g0JaZi3N2f5FxT5gCCNbHdCN4egiuwtRKu81mDvq/z:g02Tf5gbHdCNZgirP1q7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601490, "uuid": "06681481-6598-4399-82dc-b4e509697f38", "value": 76600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601490, "uuid": "8a7a6873-b39c-4746-a3d9-fc5d916afcf5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a594419-cd7e-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601490, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601490, "uuid": "874b3e72-b644-4bd1-adf4-bf4d652f57ee", "comment": "Malware payload (Mirai)", "value": "f5a2b8ee9a5c2edaa5d734479d56978c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601490, "uuid": "86751d99-68dc-4ce4-8299-2e7034491f02", "comment": "Malware payload (Mirai)", "value": "a4e92a350413fd2825998de16db6e2cb75f7bb87c013ff7987d83e9fb83c02dc", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601490, "uuid": "33a77c68-6e87-4edc-b34a-68c775ac1730", "value": "T188D3E70ABF600EF7E86FDC3702B90B06258CA55622E53B763274D938F64A54F5AD3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601490, "uuid": "dcfc290d-ac72-40f6-a210-1ab3763e642e", "value": "3072:k6c1AcqSv8XFSbR7vcuF8FCamw/nXf15uh:k6m7qSv8XFSNc8paN31", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601490, "uuid": "930f42d6-01c5-47ab-8a47-552ff9eba8a1", "value": 136588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601490, "uuid": "b30784a8-04cb-4c1d-9db5-71197fa07409", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ebeb8e4-cd79-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601490, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601490, "uuid": "b1303d37-187d-4500-be11-d176cd96fdd3", "comment": "Malware payload (Mirai)", "value": "615dd528232d6bdd61f875af07608d90", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601490, "uuid": "4e4540ca-23c4-450b-a5a9-76d7c1a9179d", "comment": "Malware payload (Mirai)", "value": "5c9e6f5a7c2820fedf5db7f10ab6c9752100ad7463a762a138b8e3b332570ba2", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601490, "uuid": "2d2d52b0-16a6-450b-9c62-35e11036a656", "value": "T100839E23E8522E44DA44E5BAB0719B7E8B13F59186172FDF91A2D3789043DDCFC4A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601490, "uuid": "d2ad785c-b205-4e33-85a3-800165c0348d", "value": "1536:jWZvodseZEa3fz7L+UoK4sNqKu48v7vJu3IC+W9nab:iFeqefXL+UoKVtu1lu3Ionab", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601490, "uuid": "b9f8cae1-4e59-401e-9a95-8b5af86b4b59", "value": 85280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601490, "uuid": "fbbf6973-45d6-4ac8-b514-fd3f4e2bdb19", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4239a6cc-ce0c-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601490, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601490, "uuid": "a0de4f9b-e802-46de-9289-e3c48ba81cbf", "comment": "Malware payload (Mirai)", "value": "86af612576541085bafd0e18aa841dee", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601490, "uuid": "bcab3507-e9da-48a5-a5da-4db580563204", "comment": "Malware payload (Mirai)", "value": "10eed94ff787bc51ee825d97c751b6774e3b173d53168fabc236ba883543e0ac", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601490, "uuid": "4742196c-e231-4219-9e41-342c36202aad", "value": "T15C93F895B9829A56C6C146BBFA4F828D772633D8E2DF3307CD246F21368B46B1D2B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601490, "uuid": "7de67836-23bb-4273-8fb3-3c8957c58c81", "value": "1536:czaUPL7xPO8arL+GjsPrU8zlHHNvEK4ThUO5hi4vpkBvctBit0s/O3Q/W8T7aMcL:czaUPLFEr6GjsPrUUVHliNp5hi4fBiqr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601490, "uuid": "9ba81900-570c-4f99-8075-9976f5615639", "value": 91596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601490, "uuid": "fa75b7a9-ac25-4a80-99cf-e8a00724ba4a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10e7c0b3-cd79-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601491, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601491, "uuid": "b8ee0f27-3f3c-45d3-905e-1904d944c87d", "comment": "Malware payload (Mirai)", "value": "55da150b08972661b61d245a2791a78a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601491, "uuid": "b712a333-94d0-42ce-93de-adcfe2de0146", "comment": "Malware payload (Mirai)", "value": "9f992532f2ac2a967f8679b93eda60921001eb5cd0fdc32c7481925273001da1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601491, "uuid": "7b6647b7-f6af-4c26-906f-795170f15899", "value": "T13FA33B02730C0B47C2631DF1293B13E1D7EBAEC122A5F285661FA74991B2E37B945E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601491, "uuid": "25cafc67-fbd2-4f1d-b64a-5580041f7d3b", "value": "1536:e1feeeZd8/PTw9ODmOhxSAaK38oKN6XyvJLNrqA7lETr5bRVlUFdnu5:Ty/PTUjOXBaE8cCp1STVbinu5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601491, "uuid": "581203a5-a9e7-4ecb-bf21-dce8fdf61b94", "value": 99888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601491, "uuid": "97de9857-0181-4fb5-a76d-25e07b69dc84", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81922bd1-d01e-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601491, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601491, "uuid": "dbb20e10-9809-421f-9479-ca94891ce0f1", "comment": "Malware payload (Mirai)", "value": "1051bd577f495017e13de6fe2c3b81dd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601491, "uuid": "cd06e7e2-9ae8-4610-bc9c-f50e206c1b2a", "comment": "Malware payload (Mirai)", "value": "61be3ad682f78b5482ce52071ab0b69ddd0422b79b95ee4d77e9a99220a38b81", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601491, "uuid": "d1c5b0ba-2270-4b9d-b659-c33251ffd040", "value": "T160A2642FA2A0CD39C884B2348ADF962451B1F0B5BF33611F2A1456F73DA375C4E39A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601491, "uuid": "dc37d79f-c14e-43bd-b62d-a991990488be", "value": "384:uEAXmAOXn6yqiaSKC6yqiaSKC6yldVNF91tldVNFvJhdILQQk5hR2FH9s9XKVkqj:u/on6yqiaSKC6yqiaSKC6yldVNF91tlS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601491, "uuid": "d0865942-581b-4bbb-80ee-c070e8ed6476", "value": 21720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601491, "uuid": "aebfe9f8-49d9-4d2f-89cf-c194f061698c", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81b10edb-d01e-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601491, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601491, "uuid": "a6a837d5-e0a6-4812-bc86-73461ce1623c", "comment": "Malware payload (Mirai)", "value": "75a103af3f935a6152993752a6d488b2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601491, "uuid": "6a12aa10-9ba5-4a5d-bdd5-ecb691823b24", "comment": "Malware payload (Mirai)", "value": "f6d38c0b7e7078877aa3e4b8beab017d34f7ca380be1533ad7fd68ecc0975177", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601491, "uuid": "cecec4ac-ce11-45a2-b2ee-0ee2475defe5", "value": "T18F72365BE7826EBBD88ADE71001F418500AF9C7CA7D6572BB16CC081EFDF54E0E65A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601491, "uuid": "869b46d2-1438-433d-9d6e-0fe66955df6c", "value": "384:yhOmbO1RDUC9PfYo5M50LLNHLstpAKSU:yhOmbMSSHLtKJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601491, "uuid": "7aa4ca34-5acd-40cc-9c43-f13096e31585", "value": 17412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601491, "uuid": "a4387867-8b29-4164-b08b-30154327c4e9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81b30a91-d01e-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601491, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601491, "uuid": "da5bc849-5eea-403d-8f41-5915b121c42a", "comment": "Malware payload (Mirai)", "value": "8b291c312877834fef9536e21d297269", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601491, "uuid": "21738d4a-f627-443a-9fca-58f7686f137d", "comment": "Malware payload (Mirai)", "value": "c470f7a03f563d8b07da9ca64dfe6964e65a2f89fbd52990f2ef1e7b7579391b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601491, "uuid": "6300a747-451b-4c37-9aa6-d1d2e23c8be2", "value": "T14A42A9176764BCB6CCD8033210C38B89427CAE71D922571B93A8949A587939C3EAEF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601491, "uuid": "7e4b115c-c11c-4c0b-9ac7-2e96c5ccdb54", "value": "192:8QuxyOWx+k6+9fdbhMyTniU1dcDWy8xBuOqRUgHHkquEpz1+y8ow/Wo:8QuxNG8WN0Wylo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601491, "uuid": "0ec1061a-2c26-4d3c-89b1-25c7ec2bbe6f", "value": 12400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601491, "uuid": "9796d0fd-d702-4618-9ee8-3d970e8976ec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81baf98c-d01e-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601491, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601491, "uuid": "fc8fb4ea-c18e-4630-854f-9da99e576919", "comment": "Malware payload (Mirai)", "value": "f4f82a821b615c12fcc7948f8e0730bf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601491, "uuid": "2db924b6-f442-48d5-9bac-2647250f1b1f", "comment": "Malware payload (Mirai)", "value": "8c1a5337553dbebf72f54462ac7bfeebc1630ad0b1002b98cac9c4be9523af56", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601491, "uuid": "bc9ded98-0f26-4e7a-ab4b-c5a180a198b6", "value": "T1E5D32A56E7418B53C0D61775B6EF42453323ABA493DB73069928AFF43F8279E0E23A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601491, "uuid": "cd13427f-12b9-4974-83e1-c328c03fabf7", "value": "3072:vIWGv+D+KJarvJJpDYjln8wNpYipn0+HutbM/9N8:vIWG0HJarvJJpcBn8Zan0+HuJM/9N8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601491, "uuid": "6a62cc69-efb0-41f8-9e39-8310c8d44817", "value": 141770, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601491, "uuid": "9cb9191f-f03f-4408-a988-8f6e821b6c2e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "afac2b99-cd78-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601491, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601491, "uuid": "98b6afd9-9cd1-45b2-ba8f-63b3792cc551", "comment": "Malware payload (Mirai)", "value": "5af13169face802b79129fead5eae33c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601491, "uuid": "c89d32ed-688b-4711-afa8-1f5cbfca7821", "comment": "Malware payload (Mirai)", "value": "1d37efdab70c5664fae1e132ed48fb98e92882fc6139a5529c270625ed5ce53f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601491, "uuid": "be365630-fbe5-4e8b-a0e0-1bf69f31c237", "value": "T1F1C3085AF9819F11D5D616BFFE4F428933232BA8E3DF72029D145B2036CA56B0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601491, "uuid": "b55d54e8-bd87-438a-8156-c88e6149c7ba", "value": "3072:QjOA33btcVvlzFahp1oh9I6ZY+/QfvaeRceV3/1t+a3y0Xzn5r:QqA33btcDJa2h6SQ3aeRceV3/r+89", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601491, "uuid": "9e2a70d1-cdac-441f-9d50-3604a84716f3", "value": 122144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601491, "uuid": "afa6acf9-7a78-44dd-a545-084878668cd3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0bbed5ab-818b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736601491, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601491, "uuid": "83ed99ff-ff30-4080-9c0a-1d2482925fee", "comment": "Malware payload", "value": "96a6a7e8bb5f6ac029f53108e8c192c2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601491, "uuid": "fc6d9b17-4a9a-46ba-94fa-3d6583b4fdba", "comment": "Malware payload", "value": "dabce5d0089398dbd63a4e4b9a8e0359f3e22ca283938d4c194392178f9d4185", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601491, "uuid": "0910380a-163c-4443-8488-c967d324a46a", "value": "T119334B02B21C0E57C0A35A70253F5BD0D7BEAAD022E4F685351F9B9A96B1E335486F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601491, "uuid": "ac2889e7-5d0e-4760-b514-ed44892cf60a", "value": "768:gxvLpkAJEtRMH8F1492zxy4dUh2e9+mIVKgjw09RgyOYFRxtJS1wnhIUW:gZWLLj4ixp2hX+PKc9RgxMxrnnhS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601491, "uuid": "4c335fc4-5911-45b7-868a-def2f71b254d", "value": 54676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601491, "uuid": "6d67c219-a7d0-4ac8-b031-ecd1460bea2d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0bba52bd-818b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736601491, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601491, "uuid": "2d3d3a5a-6445-4d3d-b64c-8586397581c2", "comment": "Malware payload", "value": "4f7f0dab1d24e937c23e6751ef51e43b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601491, "uuid": "0b1ec7d0-d569-41a9-8f23-1d45d12b81e6", "comment": "Malware payload", "value": "d5f3530e9847792931687d2d693fda27de9b6d32de5650d33f8aef6aa9c53af8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601491, "uuid": "c2d4ff1d-f1a2-4578-8bfa-2d3b41c78c89", "value": "T1D1433C21BA761E27C0C1A47621FB4B25B6F147DE26E8C60A3DB20D9FAF705406553E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601491, "uuid": "f03a0bce-fcba-42ac-a143-a4cd0824f8a0", "value": "1536:v6dIzQlmFrKq+uhTsufe7xqIQuEL75WtfbNPr+:y4TDOx1mVgNPr+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601491, "uuid": "b8894715-1dc0-4ab4-b232-1a2f0f7d8f52", "value": 58688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601491, "uuid": "150f0934-0d90-4b6f-ac82-61f911de0dd0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "12cbaae9-80c0-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601491, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601491, "uuid": "4240a6bf-b1af-4f10-9d68-4293b80370a7", "comment": "Malware payload (Mirai)", "value": "0c80e0b9d3f04f86da21279c43a198c4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601491, "uuid": "86f30eac-5503-4e90-a606-aba998ae7a60", "comment": "Malware payload (Mirai)", "value": "1aa54139ce80433c1943829b4bccebb5c507896061cf5afcbf839ee5c180ff91", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601491, "uuid": "80e0188a-6b0b-429b-ae79-0b81f62b481b", "value": "T1D363A61ABE228FECF759823547B74E21A75823C637A1D645E29CD6002E7134E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601491, "uuid": "d5b2ee04-aba0-48c8-97ad-389b613c36a1", "value": "768:5VnaNMdufLQmMh9rcAHNMtYEkkQ6cb38IT5zO4menbMSR5O1pjyg61erNhywn9IZ:/dusf11c438+zOwurEehhLn9q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601491, "uuid": "6e75de9d-cc0a-4899-8f1f-c9721cb0e2e1", "value": 72288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601491, "uuid": "a2a136d4-c154-4693-a728-318a3537aec7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81dae576-d01e-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601491, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601491, "uuid": "3cb21f4e-7753-4ea0-a7df-b86d00968d01", "comment": "Malware payload (Mirai)", "value": "8719f0c58fc7e9c2c771bf88d95fcc96", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601491, "uuid": "c29d157c-bc6a-4f61-8d04-eae60ab23773", "comment": "Malware payload (Mirai)", "value": "15dd328e94ceededfb2300481116bb4269b9f0361ea6e474a6c8fe76bab2d15d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601491, "uuid": "7d054413-0f3e-4eba-bf4b-5d3b9f9cae38", "value": "T1D892A66BAA52C833C0436239028F995C2134C435FA43C667F71889B5BCE575D9F2BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601491, "uuid": "15d1a52e-2f47-4dfc-a9a8-20db094dc97a", "value": "192:ewNpSbbNJ3NAmBpPv6MZWMx+slZsqELaARw4R70DWbTZSQaWfZl4:a7reMtlZvtARwM0oIQf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601491, "uuid": "91f7126b-0c5c-4e66-ae5b-d12a77f2ada4", "value": 20540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601491, "uuid": "15f45b8e-2e8e-488f-9f6b-908c522dca12", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81ed411c-d01e-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601491, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601491, "uuid": "3f08c42e-f912-4357-a3cc-6fe576ee9bdd", "comment": "Malware payload (Mirai)", "value": "75874e84368b87257c85d7e4239ba8ba", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601491, "uuid": "c052fc2e-9b99-4cc5-98bf-eefa135c7382", "comment": "Malware payload (Mirai)", "value": "368b6297a25379693a9cf242b15e8727bcf46f792a2dddd36b53ab5642b7b0d9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601491, "uuid": "04dfc757-a731-4df7-ac4b-8c421d6b26a6", "value": "T1E0825386F5A2CA7ACD902171566392AC3379CEB5DF8B9353B12801706FCAB891F356", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601491, "uuid": "7e5c47e0-a8b9-4823-8172-67de71a92d4a", "value": "192:KtvGyd+V4AfGBv+hpQbaeZBw1V7jxTIdn9xAKEb9s3ENBHnQ7s3:KtukYfGl+hpwakw1hxG9xAKEbtnHQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601491, "uuid": "0c193855-e00b-4bbd-9b02-7a2baa4b7692", "value": 17632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601491, "uuid": "82798f35-7cc5-41d3-80a3-2d80f4831aa0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81f7161a-d01e-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601491, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601491, "uuid": "666a675b-3d29-4935-9c5c-c27748658615", "comment": "Malware payload (Mirai)", "value": "e8e5f70f4a9b18665ca53a2fd0e7b9dc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601491, "uuid": "7ddf441b-a5af-49c8-a618-345cb7e2bc2e", "comment": "Malware payload (Mirai)", "value": "7e1226aa38a9f5e729bfce4b956ab068bb7aaf942c7fbba5effaca59bb7282d6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601491, "uuid": "cf68a8d3-6525-4937-a407-ef5057e429a7", "value": "T1CA72102EB250FBDFEA69D27401F247E4436214E3AEC24793E07DD9150EEA11C1CAD9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601491, "uuid": "34ab8649-d574-4a31-a7ff-b326e2c51702", "value": "384:JDBXvdUqbLJva8/QlCXAk7zuVwZlZtsdIVUtZaLwlS/:Jd15bLJt/QlCXAazumZtQ8WM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601491, "uuid": "30d8f3b3-7f2f-4145-971d-bce389a27084", "value": 17412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601491, "uuid": "190426b4-67ad-42b8-a30f-52a5f52f189d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82833cc9-d01e-11ef-afe5-82aee05be84a", "comment": "Malware payload (MooBot)", "timestamp": 1736601492, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601492, "uuid": "3de67e4c-6439-4ba6-9a48-2527e9ae84d5", "comment": "Malware payload (MooBot)", "value": "b3d599e248dc77055c2b43756660cbe6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601492, "uuid": "6c5853a9-3d8b-4b48-95b9-ea438f9d99fd", "comment": "Malware payload (MooBot)", "value": "779d005b4a5834d7c5020b5da5ed17332afc12d64fa7ce3e3bf0c39fa8efdda7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601492, "uuid": "0fb6a0ce-50a9-430a-b343-90fe075114b1", "value": "T1B2434A02B31C0E47C0A35970263F5BD097BEA5E022E4F685351F9B969A72E371486F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601492, "uuid": "a327187f-e06f-4e36-bac9-60a86b86bbb7", "value": "768:JfsrmjuyuRP4R1I0mQC/N4IICBKepcC9NEIs9+m1HVOjvYggGK0FRxtrSEwnkIY:VsIuy80cI6Keacmf+MVyYgg5Ix5Ynk7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601492, "uuid": "bcb13c91-ee05-4eb5-81a1-01b966246ecf", "value": 56384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601492, "uuid": "57355cdf-51ec-4615-b907-ffdd0610ea9e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82cb086e-d01e-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601493, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601493, "uuid": "97b5c01a-f8b1-42b0-920b-ab0f57676cf2", "comment": "Malware payload (Mirai)", "value": "c2a7b6b3b54b1ff1fe27e8936d7c8d6b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601493, "uuid": "08cc93b2-0ca3-47d6-9660-fd8103ddc6e3", "comment": "Malware payload (Mirai)", "value": "e608ec9c2521ec42ad12c10bd337611a2b826a764bc7ba08aa5ff66210fe6a31", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601493, "uuid": "d8a7d464-51d3-4d9b-a29d-749654dcc278", "value": "T1CB533A31BA761E17C4D1A4B621F74B25B2B547CE22E8C60B3DB10E9EBF61A406513E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601493, "uuid": "29e57101-14d4-49de-9100-b697ba40c56a", "value": "1536:agv01e+xFEXuIjtcurl/C8QZX75ZGtdANcZ:XhwsiXVrNcZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601493, "uuid": "1bdce3a3-4cc2-42d7-94e1-163f471ca0bb", "value": 61072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601493, "uuid": "051891d9-8825-4ef0-9fbe-5f324739ce19", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ae86d66-cd78-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601493, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601493, "uuid": "1ce5e256-5ba4-4619-a6b8-d38da99dff4c", "comment": "Malware payload (Mirai)", "value": "e025e05a9013378ed1b626e915f23264", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601493, "uuid": "d1de93d2-5033-45c0-96a7-d63f2a476432", "comment": "Malware payload (Mirai)", "value": "9376abbaae9674fd273d60ac55c4b2e79ccdfa0bce29c47e3ddbef0268ec5453", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601493, "uuid": "e2e2e0d9-8bb0-43d1-bbd2-ba19ca3f5662", "value": "T193B3F85AB8828B16C5C502BFFE4F528D332327A8E3DF72129D146F2177CA56B0D6B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601493, "uuid": "5524a20a-1153-4871-b4c4-29a035ffa03d", "value": "3072:AWBSlbltZXmBFCSDGA8o2eyOy9fNkP7IaMEOD18nyy:AWSlbltZ+oSAoA9lG0aKY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601493, "uuid": "3206976e-34b7-41b3-bcd6-1f5caf1e76cf", "value": 108700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601493, "uuid": "23261b98-44b5-4cca-a1dd-9a12d36647df", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a411e521-cd7d-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601494, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601494, "uuid": "e29e9322-da72-4cc8-906a-7d0ae95b0a8e", "comment": "Malware payload (Mirai)", "value": "d6d015616dde17e02f8bc7ce1c1dc955", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601494, "uuid": "afffcabf-e7ce-47c5-a4b7-b0674e9343a1", "comment": "Malware payload (Mirai)", "value": "facbd451d8835cc373382ff838a4aec5ac55c4dc56aceadfabacd66ff167c3b5", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601494, "uuid": "42334354-ddb3-4669-ad3f-38eb4ef7d721", "value": "T15C93380778C08DFDC499D5351AAFA53AE732F05C2126729B27907F316E8FE612F1A0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601494, "uuid": "1ef413e8-6f64-49b4-8678-314820be06cb", "value": "1536:oMaLU6yFDYm220oyi5u41viiivs6lsOP0xOvs5Fykh9TGCyyexErtlpLJGsIKuo1:BaLkFDYm220oPniiiQvxOvs5Fykh9TGI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601494, "uuid": "a7eaf4c0-d3da-40f5-854b-eb1999ddeebe", "value": 93744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601494, "uuid": "c04ab179-ecd1-43a0-88a9-3132542a4341", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83ba45b4-d01e-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601494, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601494, "uuid": "46d8ac9b-c98d-4548-8118-5e16f25a47ad", "comment": "Malware payload (Mirai)", "value": "436f659b243018cde3661a2504754379", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601494, "uuid": "9fd673ee-3ecb-44c7-b541-0169d46c86b9", "comment": "Malware payload (Mirai)", "value": "fe4724af2151cebbcc41e1dac2e8c119fc269f90f21328bfebdb869ca39832d3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601494, "uuid": "7afe2f02-42d8-4d41-99c7-f6316c839b07", "value": "T15F533951F8815623C6D1127BF66E428D3B2623E8E2DF73079D225F2037C692B0DABE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601494, "uuid": "59fd89a1-66ad-45f4-b225-c12a97e3ac99", "value": "1536:qfM5Ug0HC5oqTJA9hB7JkGQ8DGgLgv6nw:2MfoxJ88it6nw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601494, "uuid": "b24df03a-66b3-42fe-a3b7-26febaa2374e", "value": 61256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601494, "uuid": "97808cd6-4f47-4dc1-a8ac-d0e74294f2be", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83c8d5e4-d01e-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601495, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601495, "uuid": "f338fc14-e35b-413e-8a8b-390123e7d8f6", "comment": "Malware payload (Mirai)", "value": "b7fdf87745cd2ba500496c660e587f84", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601495, "uuid": "fc935265-e308-42d3-ad41-3aca8f522ac0", "comment": "Malware payload (Mirai)", "value": "004a43d2b6f1e5ca3fcbe12f75e40fe4ad06773799253455aa48deb9df72e4ec", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601495, "uuid": "7e1321c7-5631-49ea-b0fe-aaf6ed42d804", "value": "T101334BC8F543D9F4ED471570117BFB379A32F1E61228E653D3A4AB32AC93601A906A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601495, "uuid": "4b16a5f7-740b-4528-9193-03bbe6012c09", "value": "1536:L58qi4Si4A/qh3EcEI3FjrDTL4P+bSTCYu:L58qi4SiJihxEmFfHo+OCYu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601495, "uuid": "a7e94b9e-dc77-4704-824d-9c6dd6ba0efe", "value": 50256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601495, "uuid": "a9a0c9e3-cd79-4ea6-9a58-2514d0850eb7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0f76a8b-c436-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601495, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601495, "uuid": "d3b586c9-2ac8-48af-89fa-407ccf091874", "comment": "Malware payload (Mirai)", "value": "834b589b797643144bde4e2257a47f67", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601495, "uuid": "3cf7e99e-7ae6-4d29-a068-bb2c218d8e50", "comment": "Malware payload (Mirai)", "value": "3cb254ed13001fa00e991b4219b1abc3a0a2d3f2e1a1bbd69c857e878ac78c80", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601495, "uuid": "1d74028c-6080-48f1-b554-b2b73142d149", "value": "T19F632B91FD819B12C6D122B6FB2E428D772753A8D3EE72139D259F20378782B0E776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601495, "uuid": "3ce8c7ae-c14c-4e33-b44f-35cc897ed339", "value": "1536:zVjRvpV9U4CX/F/5Dn3Rt8mwK6i0NxxWTuQ136Gna/z:zVhG4gp8mwK6i0NHpQQj7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601495, "uuid": "6c266358-4e7b-4f21-a368-87dc99e1b141", "value": 73136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601495, "uuid": "b253af94-6d7f-4f5d-b640-af126cef900e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83d1ba54-d01e-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601495, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601495, "uuid": "1d6626bb-9f72-4aa2-bb4d-b44b84504764", "comment": "Malware payload (Mirai)", "value": "580ca18e5140ee547814f8377ee536f3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601495, "uuid": "8dcef559-265b-4f40-9d7a-9d9874481a21", "comment": "Malware payload (Mirai)", "value": "0d605f7d0ff62a3882e18d347d5a5cbd58f26aa047158b61a5f63fe9f15aa3e7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601495, "uuid": "3d0f7f13-5ddd-48b9-b95f-71418243f132", "value": "T152531B99F801CD7DF81BD77F4457090ABA71A3D152831B36239BF9A3BC721A91923E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601495, "uuid": "83aa79a7-a718-4937-bb15-f474ee76495c", "value": "1536:1Zdzr2WROpGA83ynq+nzWZ77DfDWFCASE8YC1:1Zd/2W8pGtQzM7f+x8YC1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601495, "uuid": "67173561-70ee-4988-ae9a-4bfeb3d4874e", "value": 62732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601495, "uuid": "861b3ea3-e315-4f85-881c-ee75d0c77c6c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "12deac22-80c0-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601495, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601495, "uuid": "8dc4ef09-3052-46e6-9e5d-48857c958b4b", "comment": "Malware payload (Mirai)", "value": "626cec0203d1d3f2d81368cf4ef3059f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601495, "uuid": "4e811d42-4ddd-4fee-8e96-d46831a86059", "comment": "Malware payload (Mirai)", "value": "2cb128357da70985675ddaedbc686baea173846b6edd0b197600d1d2e903bc2f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601495, "uuid": "40187811-70dd-4f9d-bb00-780294435a4d", "value": "T15AD32B56EB418B13C0D61775B6EF424533239BA493DB73069928BFF43F8279A4E23A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601495, "uuid": "20ebb0fb-1ca8-421d-a49c-6e8bb7831a22", "value": "3072:gVDwATfFE8KlaHzldtfY6ZonEA+pEipnVP+Mb0nM/9i+o:gVDwATWVlaHzldtA6enEManVP+MbcM/e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601495, "uuid": "50cad0f1-6de4-4249-8e0e-c74d31c53bbc", "value": 139050, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601495, "uuid": "0dbd9084-3aea-4dff-94ed-3b12ba1be51e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8aeeca2f-b6e6-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601495, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601495, "uuid": "885fe979-f2a4-4b64-aa0c-589a267f1e88", "comment": "Malware payload (Mirai)", "value": "69ceec48a718b00eb53bea6794b70873", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601495, "uuid": "cb9bce10-ea71-48f6-9ac3-f131ef98551c", "comment": "Malware payload (Mirai)", "value": "1d8175b30baf334465557eb6721a6c566234a980c24e159771834de0ae61a4f8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601495, "uuid": "51d86dd6-c57e-4e45-ad23-cac330b73f45", "value": "T1D893E65ABF610EFBD86FCD3706A9070535CC551B22B83B363574D828F64A64B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601495, "uuid": "af71be25-2fb6-4b04-bb05-b51e0939e1a2", "value": "1536:URQjsiMZXLlZGtMqYAtzNqxfGHF/QsbnkZUevhkigp8LiVz1qi/Lb:UResrB04cF/QKnkTM4qqiTb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601495, "uuid": "a3f4d67b-4442-4c91-b9aa-1de83ce332c0", "value": 97356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601495, "uuid": "07cefe0f-c111-46a2-be53-3250dbd26973", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83fd35b8-d01e-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601495, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601495, "uuid": "036b3878-b858-40e2-a823-745d7f595aaa", "comment": "Malware payload (Mirai)", "value": "25851aae69b8de823400a3d9998b163f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601495, "uuid": "0886ed0e-1c21-4b63-9fba-063cc2aa806e", "comment": "Malware payload (Mirai)", "value": "c81d7f537eb3f5cb599bbbf5317ffc7583ecf3b7742e0f7cb7bfdd55a0a2c3a5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601495, "uuid": "120b140e-155c-44f7-be5b-119aea351b78", "value": "T1A9828393E950DC7BDDC087708D6B46E2B33391A89B2313C7790915986E9375CED2A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601495, "uuid": "1f538abe-4af5-4877-a358-317d3b236d32", "value": "192:S4qW2wq694pQtMv8CXVTi1ZtEaJmEtk9xwR9ohRKgc7gbwr87oh:S49J9wQtMvFaPYxwTohRKywL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601495, "uuid": "244a9445-27b2-41e6-8f86-7af21fe5f8e8", "value": 18848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601495, "uuid": "0b59ccec-10ee-4af5-bd1e-0786a8e86f00", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f2ae4475-cd78-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601495, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601495, "uuid": "22b6842f-e89c-499c-8e23-b44ae64462c3", "comment": "Malware payload (Mirai)", "value": "6b961c4714f896ca32557a02715ba8f8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601495, "uuid": "c5ce3442-4142-43f0-9323-8092f0a2d1a5", "comment": "Malware payload (Mirai)", "value": "3e622562b588aac0fca372c2143fb5e5301ee015c5572d14c2b165d836aacf04", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601495, "uuid": "ebe4420c-1fce-417c-ab8c-6475d7404147", "value": "T10AB34A2279711E1BC4C0563A21E34332F2F9778624ACDA1B7E721E8DBFA465036177", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601495, "uuid": "8ef02af5-6bb3-4e37-ad78-b05898121ec0", "value": "1536:s52Fbd9719Emc127JPQfzH46omhje4driPWCByRLtxIuo+557thHIfHyN:s5sF4o5QL7IuoI3HIy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601495, "uuid": "b7f87fb1-77eb-48a6-8464-e7101d8f1572", "value": 108856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601495, "uuid": "612e9327-cafb-4193-868e-f2c41d440603", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8425b7ad-d01e-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601495, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601495, "uuid": "68cf685d-26e7-43ba-b74e-0a642e74fa63", "comment": "Malware payload (Mirai)", "value": "47a244cea8b42d8d7071df3a2ebb81d6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601495, "uuid": "a3d50549-3031-4999-b0c0-3e5a48fb5137", "comment": "Malware payload (Mirai)", "value": "846c3d091bb301e02fed99388214a9278d29c35087f77184f045bc1a88c75d70", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601495, "uuid": "24dcb562-4fe8-433b-8d21-fdb88e86c4a1", "value": "T165B2710777D09E22C42D87310DB6532475FACAA9ACF14387A3D88ADB1DCB3491E799", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601495, "uuid": "0fc2aac4-4020-4316-8155-71b33dc23a94", "value": "192:X+yyDLxE7iXDodsUM7Kc1iM1gYQUGLOuDx8AI4igJod:X3yDL8bdsUbc1iMjH/uD2lgw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601495, "uuid": "db8e6a1f-598b-48b3-b0cf-2488154c91a9", "value": 23648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601495, "uuid": "c318fbfb-a100-4448-9821-2d3f982b0258", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0ff5670-c436-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601546, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601546, "uuid": "b5b97f88-f754-4975-a6ce-f04dfc811c9e", "comment": "Malware payload (Mirai)", "value": "8096c711663cab918175b4cfc310f883", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601546, "uuid": "c74927eb-1caa-43ff-87a0-fc179367611c", "comment": "Malware payload (Mirai)", "value": "73eea8064571f8daa5c49e826482872e514fac312189e238c635effe16192f52", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601546, "uuid": "4476d0b8-9cee-464b-be39-2a60be2e2bcb", "value": "T1CE832955B8819B11D5D112BAFE1E118E33131B7CE3DFB3129D20AF24778A96B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601546, "uuid": "b1d2e3b9-a47a-4bf2-9a28-5a57cc350bca", "value": "1536:1knsYsyzVHeSI5diSs6OaXm+aF6HnQRMmi8EGLwjkD7pem5jYd/YFx:AZeSI7c6FXm+aF5EGLwjkDFemZgA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601546, "uuid": "d02f79c6-5109-43dc-b3c8-91de81794da4", "value": 83856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601546, "uuid": "5eeb7f54-adc0-4ee3-8e97-fefd770b7d91", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a2a69f20-d01e-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601546, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601546, "uuid": "d178b751-5fb5-45b2-987a-fcb1ddaadf45", "comment": "Malware payload (Mirai)", "value": "f4d93073bff0f1813d2e63919279ed07", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601546, "uuid": "c2b6a8f8-aec4-49c6-b44f-4193ca52588c", "comment": "Malware payload (Mirai)", "value": "3feeac05decb1f0ef77a2609f3727887a78411a544fc62dda7f7dc4f14aefb0a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601546, "uuid": "1b456ae8-e19b-481a-9dc0-9eef7f9343f2", "value": "T16673951A6E628FADF759833447B78E21AB5833D627D1D641E26CD6002F7034E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601546, "uuid": "c37db2bf-b036-48d9-9fe7-3171121b2f4a", "value": "768:uOHdEN88rdOdkr06mCpddIgGg/vPQKTQCQmZzck7XDSWbT2tAjUv5yzmRef8yWRH:aL5d5gLazT7vLU5e/W6nQ9D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601546, "uuid": "15b8275d-62a4-4f8b-9ff5-0fe55a5038bf", "value": 76384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601546, "uuid": "b07a5603-e8ec-4783-b500-c14f7dc69c9e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a2ab81e0-d01e-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601546, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601546, "uuid": "06d58edc-b02c-4282-b577-fd88b4a41bdb", "comment": "Malware payload (Mirai)", "value": "aa1bbc743b1d280af074ea83e1cd43d3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601546, "uuid": "49d47b5f-bcb1-49b1-98a6-c12df5a3b4e9", "comment": "Malware payload (Mirai)", "value": "d99e652690875b33e274832efd83d2cfef20da7ed7ff7428e71fbf34d1848071", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601546, "uuid": "2d1bfe3b-97d2-4749-935e-ad60911940d1", "value": "T14273D715FF550FB7DCABCD3705A9170239CC558A22E47B3A7934D828B65B20B49E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601546, "uuid": "a5744818-bae9-4316-ad2a-3da7cc595b5b", "value": "768:sD7fxbOUp9+goKPsJtN1hCeF56eYOiKfrwwuaYbZdkWFXi2U7n/eYYTEOCwn8Ik:snxbRFs8Y56vO82wZdn+n/nYTvn8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601546, "uuid": "772b1018-75b4-4d4d-97db-1a9d4d54ec11", "value": 76384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601546, "uuid": "49b9fe98-7a99-4ce4-a040-6348b1b9defb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0bb7562f-818b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736601546, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601546, "uuid": "17ca6de2-d224-4142-a756-5fb4d1512ed0", "comment": "Malware payload", "value": "37eaff17f4feb8d210b2628f0073115f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601546, "uuid": "96c74361-204d-4a8c-b03e-e4ad6483083e", "comment": "Malware payload", "value": "c8ffbb79daa831c6632e4351bf44f25077e79d316367a47ae3f98f1d16df1be7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601546, "uuid": "75f3d524-53fa-479e-9f07-135b6e3086d0", "value": "T1AB630956F8814B22C5D6027AF96E128E332317F8E3DEB3129D206B6077C696B0E37D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601546, "uuid": "3fca0612-6de4-46ef-b163-bceb195d9482", "value": "1536:JQnOum8F4JSuRng6YxyOz8Ewahl/z4IriT4To4+jXjL5PYon0:Z8wSCn5tFaO4To4+jXjLVBn0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601546, "uuid": "474e95b2-cc0f-41c5-a1a2-e86d40e57c2d", "value": 68560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601546, "uuid": "c716f9dd-3745-4851-bec7-17975437de23", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f4ec4e1-cdef-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601614, "uuid": "6d826d04-6eb1-4327-a3d3-482dd5994287", "comment": "Malware payload (Mirai)", "value": "87a674a1cd303c58d819270cddd7fc63", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "LZRD", "colour": "#4946db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601614, "uuid": "164e43c3-b718-499b-91d8-a95c1fc2240d", "comment": "Malware payload (Mirai)", "value": "192dc6e6726aaa9cce13eaaf812b070d7aa9b4824c2b1dee17e680e3d75284f7", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "LZRD", "colour": "#4946db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601614, "uuid": "89b1f066-9cc0-4f3d-b434-ad912e5bce88", "value": "T109E2E1C3711BD1F8E5FB583B051D4B24F63220821A2B9B29096D6BAF4C75A9E1CD0B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601614, "uuid": "332a5a24-e867-40b1-b796-f2e2b4412846", "value": "768:T4HhLfM7WvNg3biwzEki/pYrqMuBgKxzIRd:sHhfM7WK+kNOMWgK+Rd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601614, "uuid": "7de05816-c0ba-4578-9ef2-c62f7c2f645e", "value": 32448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601614, "uuid": "c8b54e82-9262-4f3d-b2a1-390c47f236d2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f5b4d93-cdef-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601614, "uuid": "23fa6748-2b52-44c0-b72e-20c904c7c326", "comment": "Malware payload (Mirai)", "value": "a72465eba9e4ff86f1b35a4951660124", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "LZRD", "colour": "#4946db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601614, "uuid": "fcc60e30-8c18-477b-b75a-0b2f99b09262", "comment": "Malware payload (Mirai)", "value": "03d0cc1607db3d49d7658c9f00e097a2f03b5d3ba682f0454777acc7f5e189d1", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "LZRD", "colour": "#4946db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601614, "uuid": "0645c9c3-cf38-43b9-afef-4fdca8110b23", "value": "T139635C32B9751E2BC4D1A87A61F74724F2F2474A25ECCA1E7D620E4EFF21A4022576", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601614, "uuid": "ed77ee8f-dea5-445e-a4d6-51e6a1d48602", "value": "1536:QUNqSMAxF+mFm0+4YhZeGpatVV7y5F8t/dlq:Fju8411pa57CGd0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601614, "uuid": "21f9cce4-a354-4ec4-afdd-71d0a189018d", "value": 66920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601614, "uuid": "5b7efa65-6419-4bc0-af1c-92502c03bfa9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2fa9278-cdef-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601614, "uuid": "42876eef-6835-4f88-a3cd-4abfbc525c2f", "comment": "Malware payload (Mirai)", "value": "8e433b9dff05fca3171b94747dfe93a4", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "LZRD", "colour": "#4946db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601614, "uuid": "bee9560e-a445-4dab-beac-f8810a4be58a", "comment": "Malware payload (Mirai)", "value": "dfa0c95348765c1b6347a5cd007cfe59e7208b3787bf779e6ea2e47d407f6fe9", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "LZRD", "colour": "#4946db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601614, "uuid": "78069852-4e34-4962-b758-c930f8c44e2c", "value": "T100D2E157D6DA58A8EB7A1C6459E28AC12FF11B86B455AFA50080DFB5A0797336270C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601614, "uuid": "0b14ce54-c8f1-4c3f-abc5-7b0abcc983ea", "value": "768:0XeoyI8OUc9pHxGYCKthieVyr7HXRcZrtogk3M4uVcqgw0E0tLyi/:GtUcDH8Y7rVyWrd4u+qgw0VuS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601614, "uuid": "abdcbc3f-6e44-4936-8766-63af3484cd19", "value": 30964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601614, "uuid": "eb60b156-2089-4837-a1d2-790b42594fbf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f47d81b-cdef-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601614, "uuid": "252120e0-cbd8-49df-8b03-4a894f11860b", "comment": "Malware payload (Mirai)", "value": "59e45a4511c74f2fe41b09e5ccb31a75", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "LZRD", "colour": "#4946db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601614, "uuid": "4491d4ad-5d4a-4444-9956-c68620718ad0", "comment": "Malware payload (Mirai)", "value": "76f480bb5d3b4321c07669e00e4d64dbefaa08cb5be971eb42c35add03deabc7", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "LZRD", "colour": "#4946db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601614, "uuid": "3318db98-0811-4605-869c-1fb49ad59a25", "value": "T14643026313CDE5B0EE231C73DA1464A8DB7735FDFDAB351620A3A9EC72913A412296", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601614, "uuid": "009a7d5a-e633-4e6b-b6df-d2f9e3bbd510", "value": "1536:gSXAUniVqRZAYOfw/AvRPs0GkJLm7FqRXivF43:gONVOfw/AvRPNmXFW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601614, "uuid": "b002be8d-8c10-41fa-aa9f-0e117a2d1e5b", "value": 57964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601614, "uuid": "58d8a6f4-6938-42a1-ba37-b6da03d4133a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2f51607-cdef-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601614, "uuid": "f6b1607b-244d-4899-89c6-819946cf53b6", "comment": "Malware payload (Mirai)", "value": "43c85a4e8502b34115492f847a14c751", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "LZRD", "colour": "#4946db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601614, "uuid": "479ad62a-08e3-40ea-83c5-993779798f37", "comment": "Malware payload (Mirai)", "value": "9ed7c3f041272b98d202b68cecb44e5926947df78d49f844cc40c561cb03f734", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "LZRD", "colour": "#4946db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601614, "uuid": "487b00a9-9750-40fb-b9ff-1415c79c9cbf", "value": "T178E2E1201F080603C86F597057F44A1D272112B1EA97AF0375F97A93ABD5FE137CAA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601614, "uuid": "a8b42a9e-f0f4-4666-9134-db424aafa459", "value": "768:nphvQStErdfXs2pH/nG5e+ouRyVf837XUjV20JgGlzDpGO+W:nHup82p+5IuR5UjRVGW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601614, "uuid": "f46e1eeb-ca41-4216-ad4b-14429067cd40", "value": 33752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601614, "uuid": "4204c973-5fcb-40d2-83b7-560c1e7d8ca2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f5ad4de-cdef-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601614, "uuid": "ab2b79f9-9d0c-4364-893f-4c1c3f4cd900", "comment": "Malware payload (Mirai)", "value": "fcc4681513b58c125d5898d7f94a36b2", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "LZRD", "colour": "#4946db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601614, "uuid": "d29dcf16-00a0-4b2f-8a8a-76038721fad2", "comment": "Malware payload (Mirai)", "value": "bebb0ff043cb40ec2fc9f1e6c01bfa53aa8e063c4271986497abb2646708d837", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "LZRD", "colour": "#4946db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601614, "uuid": "5650f22c-51fd-47d8-a898-73a10352e511", "value": "T1DAF2F14DD6E9B5D5EF5B4A3C9CA423791928E9C351428BC56730CE8A89E6F0BB08F4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601614, "uuid": "fb2a6c58-df69-4ca7-b19f-88f2ec21b38e", "value": "768:0pit/u/ybjEicm6Rlm0Dw524yvc8ekTOvOzG3YJoXLWhOf:0oFutnRrw5LyvgvovJNs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601614, "uuid": "93980d9b-1b37-4a5d-a373-da0b0b18f31c", "value": 34792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601614, "uuid": "c518b3f1-5f81-4fae-8a0d-a866075cb663", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f56684b-cdef-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601614, "uuid": "ab48cdc2-8d83-4f26-87a4-5295ed5dae3b", "comment": "Malware payload (Mirai)", "value": "2e22660cb3d80c9b815c2c202aeb026e", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "LZRD", "colour": "#4946db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601614, "uuid": "569a1879-1eea-4e34-bbe3-6999c43e26e3", "comment": "Malware payload (Mirai)", "value": "84a616beb7ec6f1461fd1228ba8f629dc2b9c1d45e9cb26395e9ca7338dfc871", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "LZRD", "colour": "#4946db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601614, "uuid": "f15e123d-4434-4959-a65a-d976afc696d2", "value": "T1ACE2E1236590E8B3C63111B3DC3D9902779BA6A521DAB075070CC2B67F89D9318BB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601614, "uuid": "8dfb48ee-b4e7-4cec-a024-428604754ab5", "value": "768:heh2UMosaCcZeOHVBT/M5ZD1k05EQCO14gFfosBKUHnC3UGwt:urVPT/IthkO1TwPUHnewt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601614, "uuid": "b12f17c2-0f05-44ce-84aa-0024def1c211", "value": 32164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601614, "uuid": "c0e46e2c-dd9c-4c10-8a33-22609a7fbf3f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f497acf-cdef-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601614, "uuid": "28221c0c-9d62-4c4c-82e0-1adace443cc4", "comment": "Malware payload (Mirai)", "value": "8d5063d215ab0a7795f2511b80e7310a", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "LZRD", "colour": "#4946db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601614, "uuid": "6eef9060-b7ff-4355-9eba-4c3e9661ab5c", "comment": "Malware payload (Mirai)", "value": "98eb4c8c5edf1ea00cbf075b2845b28f8746c93844a03e01f6ba5d9255f932ff", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "LZRD", "colour": "#4946db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601614, "uuid": "8c6bcfda-ba75-43c1-8681-3c935031bf95", "value": "T18B6329DAF810DD7DF81FE77F8463050AB671A35601820F36679BB963BD321A44962F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601614, "uuid": "498fb396-393a-4b84-b72c-5a4b6577b4db", "value": "1536:Nv5GAR311AhG/BC9sM28uMW69tISPhZHuuUTLilgoEAxn:NhGARXx/BOsMBWUDhVu3E9xn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601614, "uuid": "61a46973-485e-41ae-9a67-d8108a2608d6", "value": 67600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601614, "uuid": "7629996f-f2b5-4dd3-a42f-b211d2e68d6f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b331c176-cdef-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601614, "uuid": "659badb4-06a4-43d5-a71c-00739c0e597a", "comment": "Malware payload (Mirai)", "value": "2ec98ed3d1d54c940c988cf29893289c", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "LZRD", "colour": "#4946db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601614, "uuid": "7978a811-77e3-421a-b421-524a3c6f591c", "comment": "Malware payload (Mirai)", "value": "954b58091fd10e8b40909cf411f1e203fed9f7fce39764facf29c2beb44add30", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "LZRD", "colour": "#4946db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601614, "uuid": "fc94fa6e-6eac-41f0-b629-9c5686d495c3", "value": "T116F2E18720C1D297C6B60433F81DE202A29A56F6E0F634536F449AE8F5D768739FD6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601614, "uuid": "792a59ad-7c25-4b0b-99eb-55bf92791f97", "value": "768:1mGvi0+sE0y+Hemi1ruZQOkPhUVeTuY0G0Iqq3UoAf:jq0+30y+HeVrEQThUwTu3qA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601614, "uuid": "bb3461cc-9591-4a63-a407-dfa23b5432e0", "value": 36564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601614, "uuid": "75b3c4f4-d0a8-4e29-a7c1-6929da02b83f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f51cf9b-cdef-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736601614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601614, "uuid": "7ecb0d8b-6482-4843-ac13-f16d0f5a38ec", "comment": "Malware payload (Mirai)", "value": "180781bb607ae6bde186929e3570ef0a", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "LZRD", "colour": "#4946db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601614, "uuid": "2d8a562c-677f-44be-a2c0-7975e026d572", "comment": "Malware payload (Mirai)", "value": "76f4346fd91acdf7b9c37ba5738afb215fcc793c02ef46df8a22355fedb91e01", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "LZRD", "colour": "#4946db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601614, "uuid": "5a3220c0-aa7b-49fd-b71b-9a1ef925f774", "value": "T144D2F15CA1D86864D05F917B261EB40A89A0B90DE6E8C9BBCDFC343782D07E479296", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601614, "uuid": "910c50bb-bce9-45a4-a221-a327bd6855d9", "value": "768:F/DkhFYywTBFgoTCJCHjJ2WlfxSkbZnbcuyD7UoURb:Fr8YzdFjxj9fRZnouy8J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601614, "uuid": "528afc6b-9055-4a0c-8459-22065f926a62", "value": 30472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601614, "uuid": "c4135dcc-6790-42d3-82b7-a84e97fd1928", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f5ba5dd-cdef-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736601614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601614, "uuid": "91027590-bb50-43fe-9f79-8fdb8dbce2ac", "comment": "Malware payload", "value": "2634588bda3cf98c398c9c661671bcf2", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "LZRD", "colour": "#4946db", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601614, "uuid": "c10e8f78-defc-4491-ae01-9387e8184556", "comment": "Malware payload", "value": "8d6e4a2a63413d902527fcf5e8fe5224af17fa0b73621936fb21c8e8fc5f47df", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "LZRD", "colour": "#4946db", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601614, "uuid": "60c5dad4-3f67-4e7c-85af-c77fcf970e6e", "value": "T193D2D0B0197B9475D1B03D71C42EC40667DBA3E824B77C0727099EE82BD48492CFAD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601614, "uuid": "d02abaf4-1256-4fcf-b079-c2e00384e341", "value": "768:/PzhmhytH/ADSdyHCOjTztYpbv4kheYuk04Z9J093UGQ:jMhyBtKzjTztYdAseYuk0m9JMQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736601614, "uuid": "fb4d3f00-937e-4ec2-a82b-3055397ed106", "value": 30628, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601614, "uuid": "40e835c3-1b65-401c-855d-6290f3ade0c2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15e96816-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1736602813, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736602813, "uuid": "c0974c58-1943-4ee3-905a-c846be8afe6f", "comment": "Malware payload", "value": "99554a8313b0f99ebdaed9126d32bcff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736602813, "uuid": "f02b5041-b7e6-4fe1-aaa4-39a4abd5c4bd", "comment": "Malware payload", "value": "2791990fec00623e0c62081b8145b3aa2d9b00e145a8880ff66fc4a025cc8e4f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736602813, "uuid": "4677cd10-1ae2-46b8-bf65-a278aae9f1dd", "value": "E953120223AA297196B14AF1E7FDBB88E6493D588FF66C15AC113D6CF97235D1CC8908", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736602813, "uuid": "7ab52d65-cd79-46c6-9a14-a479b81dfdf7", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8Px6:yYI0ARqw1qAEv7UIFM8oJorFquyj/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736602813, "uuid": "83b5ed03-0fa4-45ab-936b-1ce73a2920fe", "value": 63712, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70ac46c7-cf68-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736602971, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736602971, "uuid": "93748860-54d5-4bfa-ae71-58b04a6880c7", "comment": "Malware payload", "value": "62889afdf88f184eadbf9e0289fc08c6", "object_relation": "md5", "Tag": [ { "name": "android", "colour": "#0e449a", "exportable": true, "hide_tag": false }, { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "Wapron", "colour": "#d9200c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736602971, "uuid": "b1530d6c-faf7-43f8-b816-ab1bda033a79", "comment": "Malware payload", "value": "471966ffe869b6ee2aefe3392503c2b70301ecd93f8ca64c168f3921434d1bdb", "object_relation": "sha256", "Tag": [ { "name": "android", "colour": "#0e449a", "exportable": true, "hide_tag": false }, { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "Wapron", "colour": "#d9200c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736602971, "uuid": "cfde7a34-4d25-4614-80b1-a17ab000a9a7", "value": "T12E960156F36CE92FC877A0328EBA136250994C509A41DB536A1DB70C69F7AD04F4EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736602971, "uuid": "4c0b8613-18c6-4002-bc76-3fc3b26df4ee", "value": "196608:ItI/q0HFJiGefv2fQj9q6uDv3Du7Rr/UuTTsQAu8TMXhNpKCr:F/q6Jft4jolDvzCRr/UuTQi7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736602971, "uuid": "7df6e1b7-2a4b-489e-8f59-f9a34312c7d0", "value": 8619091, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736602971, "uuid": "89e189f3-c387-48d0-b821-92a86a66f6c1", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af40f79b-d022-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736603285, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603285, "uuid": "201e81c3-e231-411b-b6eb-bb5e2dd808b8", "comment": "Malware payload", "value": "beb456d62ef1d875b3b46766402e41d7", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603285, "uuid": "d3f2f40c-e792-4210-8d66-eab4f30620f4", "comment": "Malware payload", "value": "66c1b4a020f4014a44e74f80df71ffd7088f7c341aa65f81c5b3b57f57ee8917", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603285, "uuid": "2e33cd79-b710-44fd-8491-b4f92d69c73c", "value": "T110014FCEB40591EA3C8489E9FCD14C5F90CDC08B79EE0EBD9C931DD2054BA017906A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603285, "uuid": "b3dbb5ed-4f9a-4859-893d-87ae6a4873c2", "value": "12:qg7gGQ64UMFGIy/T/HTCq1LHTC4sHTCIHTC6IhHTCEHU:f7gGb4UEGIy/TWqE4dZ6t/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736603285, "uuid": "5da82ca7-895e-4c1b-a52d-c36b52864d01", "value": 707, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603285, "uuid": "c43e82ac-140e-44d8-8bbd-40224d5c07ca", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8254dcb4-f684-11ee-b38b-82aee05be84a", "comment": "Malware payload", "timestamp": 1736603285, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603285, "uuid": "c4557dbc-c5d9-413e-a033-2fe48b9518ca", "comment": "Malware payload", "value": "9e39391af855fd996cdd90437e2eeb7b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603285, "uuid": "86094abe-0348-430d-8214-306a01cf154e", "comment": "Malware payload", "value": "6f45935bba1cffe43a4569dce556e74add4b88bd3cdc36520b2c4a2880e0f500", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603285, "uuid": "0a105dd5-e786-4bcd-8826-1c595a7ae0ef", "value": "T13775C71E2E628F6DF2A8873087F70F34976933D21BE0D584D19CD6151E6478EA81FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603285, "uuid": "20212f80-d187-4df2-b572-5ea81ea416d3", "value": "24576:qb+93fyKoyshcpOlwtk1pkh2RPuTP40PRw3BaN:D5oys6pOlh1pBur40PRQ2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736603285, "uuid": "da5a91ee-2b28-406c-8113-5a65272931bb", "value": 1576156, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603285, "uuid": "46402f08-446a-440d-8823-edbe74646fbc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603285, "uuid": "d827f30f-bb67-421d-a107-2ee6f168cb0d", "value": "t121e1add7283a23e8b7845d4d46ccee314d6624ef3de61c37ce15948eab1bb821e25c", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2bad6c4-d022-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736603345, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603345, "uuid": "6aab2429-8c7c-4906-b107-f2eaa8e71823", "comment": "Malware payload (Mirai)", "value": "1f5507735d14ae8f21456a43446ea68a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603345, "uuid": "231b8ffd-8951-4fce-b016-50b60c40928f", "comment": "Malware payload (Mirai)", "value": "6277ef0e501aff65c9062f1d3c4927f175e45f301b75838a51b44ea6b3a1252a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603345, "uuid": "b2cb6d91-716b-41fd-ad61-f4a9609f93ac", "value": "T15F0152EF88977A4D8F98AEAC717B0EA5A046F3817255CE4CFE484A3149C0B403014F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603345, "uuid": "12e2cc92-6d77-42ec-847c-36ee9921848b", "value": "12:H29pEXkOSrXwCXS9XSO91+X7t9XrvXH+Xb3sq4GaXpNJ5VP:HvkNw6OVbe7tRrHebvCp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736603345, "uuid": "5e51c9f5-d2b8-435f-8be7-8a73b40f5d08", "value": 737, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603345, "uuid": "7e5a987f-8c09-4145-824a-9bab78ac0d9f", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1b819cb-99aa-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736603410, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603410, "uuid": "79e04068-fadd-49bd-9a40-1b9e914e5c49", "comment": "Malware payload (Mirai)", "value": "6c583043d91c55aa470c08c87058e917", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "masjesu", "colour": "#bebb2c", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603410, "uuid": "c952a93f-f3df-416a-a1ba-f65cd49c72da", "comment": "Malware payload (Mirai)", "value": "2d63c81a782853efe672a1d9cb00a339ec57207b4075754a1baf1df9af466948", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "masjesu", "colour": "#bebb2c", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603410, "uuid": "d7b78d6a-2d33-4782-b7c4-ba9b06f074df", "value": "T1B5E3A51ABBA19FB7DC1BCD7706DA4601108CE44A52E96F6BB2B4C91CE38B94F04E3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603410, "uuid": "4d0e54dc-7c75-4e18-b056-31c31fa360a3", "value": "3072:iDTElsfhWriM4eiANlb5calmCjXswi5itRx2p:Of4HZLNlbvmCjXswi5i3x2p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736603410, "uuid": "d8c0faea-18e0-44fb-a654-43bbda4c7bb5", "value": 155208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603410, "uuid": "dc989efb-9551-4e3a-ae91-0f58b40a970c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b08a53b0-99aa-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736603410, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603410, "uuid": "332e74dc-b2a2-4e13-a4ed-961c1941de4c", "comment": "Malware payload (Mirai)", "value": "3c90d5820bddcf7c5d1bd21dfa49d958", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "masjesu", "colour": "#bebb2c", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603410, "uuid": "1477a69f-6795-4aa2-8f3f-513bd04444c4", "comment": "Malware payload (Mirai)", "value": "bdebb67266d5f96b7d85cfb9644deee81161b54b60b0fded6cf36544a15fa9b2", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "masjesu", "colour": "#bebb2c", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603410, "uuid": "d741912c-bfb8-4d04-bfad-5110c976d2d1", "value": "T147E3A62E3E21BFBEE2A8873107F35FB083D5219736E19346E16CD6185EB528C185E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603410, "uuid": "e4d7c64e-f2ba-473d-ad35-718e3dc6c6a2", "value": "1536:mVqSjUF+uLHLVdiLzLsLzLsL7LeLGLXL0LLLkLhqqvZjptByZEGkbU+/pWacxZkI:tr9dy1B2gSpLg70mLjXswi5itRx2p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736603410, "uuid": "0d7f2d11-ff9e-41ae-842e-a448f8828a26", "value": 155160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603410, "uuid": "a7c1e5b3-4579-4868-abe2-cd873f79251d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1c3993f-99aa-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736603410, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603410, "uuid": "e51fbe59-5a60-439f-a827-756f7da00c78", "comment": "Malware payload (Mirai)", "value": "849fa04ef88a8e8de32cb2e8538de5fe", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "masjesu", "colour": "#bebb2c", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#feb320", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603410, "uuid": "c3f36211-870f-4c82-ab18-98e5cba015f1", "comment": "Malware payload (Mirai)", "value": "8bc5e3bff5150738699927ca2b95f3e3bfd87aed44c30fc61fac788248528579", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "masjesu", "colour": "#bebb2c", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#feb320", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603410, "uuid": "22cdf0b2-c0a5-41db-a28c-fb1848b0986d", "value": "T1FBC33BA7BC01DFB7F40A977604D30B297230BF624A535566721778AB6E372C4382BB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603410, "uuid": "bd6ffcbb-c730-4892-bcd8-3160eb957aba", "value": "3072:VozXHIisGFgyKB7xlBAUNFd4vm4QbZJmf35zPp:bGmyKBxl2U+vm4QbZJm/5zPp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736603410, "uuid": "52396133-9dfb-4999-a95c-4abe0701669f", "value": 120808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603410, "uuid": "9f6ea68e-6097-4087-a38f-4aaf01a4cfa7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b082ba93-99aa-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736603412, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603412, "uuid": "a7b7964a-b2e5-44bd-b9b7-835cf33346a4", "comment": "Malware payload (Mirai)", "value": "9438d9bc392bcf300a5583b6df5bc8f6", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#dbeb65", "exportable": true, "hide_tag": false }, { "name": "masjesu", "colour": "#bebb2c", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603412, "uuid": "fcb5459f-d9de-40bb-8592-bfd0103fb565", "comment": "Malware payload (Mirai)", "value": "68e6282ed9046c9e22dbdf051dc03956803a46805f599e8cb9b52b993caa8f1e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#dbeb65", "exportable": true, "hide_tag": false }, { "name": "masjesu", "colour": "#bebb2c", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603412, "uuid": "f0864bad-89de-4077-839a-c927eab36e7a", "value": "T148A34B47EA02C7F7D8831BF502AB976A0631B93A5A2E8E44F75C7CF8BB225C871143", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603412, "uuid": "bbcb797a-8a5d-4bca-a71c-532cfbedadaa", "value": "3072:kFPlxndf22h/xwXnTkai7MYRApCg9dgdmk1b5wdL35sPX:kZlxndf8nTqtS/9dgdmk1b5wdj5sPX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736603412, "uuid": "de38d8c1-1144-4ec2-b6fe-cf28e87b0c5b", "value": 101654, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603412, "uuid": "b9ccdd17-d0eb-4628-b4ad-ca15c430cf36", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "faecdd8e-d022-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736603412, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603412, "uuid": "fb165932-0926-45f0-9810-808b413f0737", "comment": "Malware payload", "value": "8346d74b1b971566f5bd0ea857560184", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603412, "uuid": "5f17e9c7-c3d4-4c1a-9bf6-4770fc304c01", "comment": "Malware payload", "value": "079115c58dfb132f014d9ca557a9995546bd63d37af76f481b85918d8da15711", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603412, "uuid": "4aa90ced-1b57-4fbe-b40b-a8d8c400e7e9", "value": "T1C6F09ED16735F4750E0B4334CA6617002BAD318029CCF2181AEE0A8AEAC1D0F61FDC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603412, "uuid": "63178231-6579-486c-a7e7-6e003111d140", "value": "12:p79T+KnavbQ/piOKMvzO00YAH+KN7RcLHWrexy0oo7Ch:pV1avbk/rvzt8Hxla2rhVh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736603412, "uuid": "8196d523-ee4a-4149-938b-dce6f251d8b2", "value": 503, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603412, "uuid": "62790651-cf08-4965-9604-cdb6f33b47c6", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c2507a02-99e2-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736603414, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603414, "uuid": "6711f314-619b-41c6-af3b-bb2cd8d79ddb", "comment": "Malware payload", "value": "49f05359d208af71075f9c6effb7dddb", "object_relation": "md5", "Tag": [ { "name": "bruteforce", "colour": "#de303d", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603414, "uuid": "e978cbd0-e999-4209-801e-72924a517f9f", "comment": "Malware payload", "value": "bbafd119367a149bd1ca928e30cf8302b468eb23e8952af989fa64defb18c93f", "object_relation": "sha256", "Tag": [ { "name": "bruteforce", "colour": "#de303d", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603414, "uuid": "36178bde-2706-4c4f-9ff9-2b77f92e87fa", "value": "T176968C03FCA545A8C1EDD6308A629262BAB27C484B3127D33F50F7382F76BD46A797", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603414, "uuid": "89d6b133-c1c3-4543-96e4-46035dec3d7f", "value": "98304:DMRdPJ/Vkuqb9ES1ATp8nNkXYKcBH/rpOC6mKlfNiBUNPH:qVkudNXY5BHFOrXfYIP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736603414, "uuid": "05a39b4f-79cd-4433-92e0-b609893a75a0", "value": 9164716, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603414, "uuid": "c82848d7-3eee-4f34-b43b-3795d2285fbc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "627e0e4e-d023-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736603586, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603586, "uuid": "97f71500-be07-4366-94a5-bfde2b3a3224", "comment": "Malware payload (Mirai)", "value": "4867f73d8b567b014e332f37e8f6cb84", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603586, "uuid": "bf5f9dd8-3c66-4a17-8831-717060baed04", "comment": "Malware payload (Mirai)", "value": "b9b55fc701d25c1cf19446a8fdda8e453d8989bdc1156ab76ff308f80c3b972e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603586, "uuid": "0181956c-44e7-4d14-8060-9367ae6a49ea", "value": "T1262101CF04F25B3D48E4CA2DA2A38F2D614848C690C69FCE6CEC0C7B7788E50B150D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603586, "uuid": "148a58f6-3d1a-4321-84e1-fe5c51c9b2ad", "value": "24:2A6PnA6g5A6dA6MA6kA6nA60A60nA65PA6AA6nA6c:2AwnA15AoApANAuApAPnAEAFAeAn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736603586, "uuid": "fd7f157d-1202-4bda-8322-685365d966c2", "value": 1414, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603586, "uuid": "a8d12b92-c3d7-4616-81a0-12c0ea833cc5", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62821942-d023-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736603586, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603586, "uuid": "248e4123-f651-4629-b2b0-a8b751e4bf2c", "comment": "Malware payload (Mirai)", "value": "e40e7488f2e407034aba055619c74cf1", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603586, "uuid": "fb014cd7-ac97-46f7-8d52-aad9027e934d", "comment": "Malware payload (Mirai)", "value": "dd3a620561b7e5176fc96a3b0c15ab96b86fa3e99217738c71c7b2ea3709f8fe", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603586, "uuid": "e418287e-37fb-48cf-b239-03189fdc05f0", "value": "T1892132D918A26B3F4DD4DD34A2B3473F5108588790D6AEC8AD9D0CAB974DE8171501", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603586, "uuid": "272d9ab5-a921-4dfc-8066-b0d07f76e445", "value": "24:2L6PzbL6g1bL65bL66bL6ibL6zbL6SbL60zbL65rbL6ubL6zbL6de:2Lw/L1xLWLhL9L0LhLP/LqLVLkL1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736603586, "uuid": "877acea5-1fff-4ced-aa31-686cb8414ec9", "value": 1282, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603586, "uuid": "eb4144e4-cbb1-4ffa-b307-0fb92b272f4e", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "75245f03-d023-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736603617, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603617, "uuid": "351ac203-31d1-4e0e-b911-d8f6d959a3c2", "comment": "Malware payload", "value": "caaea06a4db04064d41519d601408638", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "TgToxic", "colour": "#55a911", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603617, "uuid": "b40e165f-7211-4022-964e-d4067641c613", "comment": "Malware payload", "value": "34d364e2655603cdc7d536c32ae30a8338e6b1e0592bfda62c4618bcfaf8edcf", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "TgToxic", "colour": "#55a911", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603617, "uuid": "0da095d7-2a21-4cf8-b1aa-e4262e562aac", "value": "T14D06AE8B7F484529FEB305764E9A52F1E1869F42CD03D2C76964332C147B6B82F9A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603617, "uuid": "35f23760-0b8a-4117-afa6-3cfca6cf307d", "value": "49152:5gW1wiy8VlJ1mZtHo1BOM1duFr/nNebPXoLmJj+1fOGnRnJzzvv/7cj00o//3:F1y8VlJ8i5XoIiOUfLDcjzQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736603617, "uuid": "522ee2ef-70d6-409d-b3ec-492cbea9a342", "value": 3664396, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603617, "uuid": "b5bb4741-f5eb-4780-8d72-b43e41956b1c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a6fba78-d024-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736604200, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736604200, "uuid": "4db744f6-f1ef-49d7-a18a-d5f3e9189f03", "comment": "Malware payload", "value": "085e66935db35f1c56c6160f7f29d421", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736604200, "uuid": "38c17e5d-fd90-45f7-9e56-0d5c0e58929b", "comment": "Malware payload", "value": "25480d125fac04b38df002b47d98289f6175dbb3a3f5e73a007fa246910eb746", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736604200, "uuid": "6ac77e3d-ab27-4d4f-a300-bf6d6b1c430c", "value": "T1E5B5333A62BDE50DCC57AA74C62663127C2B5CDB16E8259ECB1BD69AE4F41043332F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736604200, "uuid": "05098390-d8f3-4691-925f-17fffd67a4e1", "value": "49152:vAOf2azRUQrN+bZZ9K/Ngu5tIG2BDI0RntdwB5W4ERbNW4ERb1YYc22TFOpjtihq:vBhzGesbZWSvG2BPnr6WnZWnh86tih", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736604200, "uuid": "3f55708d-4274-4835-b084-1e15dff94519", "value": 2377225, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736604200, "uuid": "c9f2c8e6-28cd-424f-9f1a-9a644d7b694a", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3367c61f-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736626700, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626700, "uuid": "7b2608d8-3671-497e-b7c5-9c7a3a6c8f01", "comment": "Malware payload", "value": "b2dcc119282b2e97b7d0d3fb70a5f5cb", "object_relation": "md5", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626700, "uuid": "50f8dfad-4344-46e7-b7e2-6ea515168a83", "comment": "Malware payload", "value": "c76b78fbf3f3ef99301ad417edaafe1e50bc56db6bbb161b659553015ce89138", "object_relation": "sha256", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626700, "uuid": "39f89385-91dd-4766-bd22-6cb4a88b8cc0", "value": "T1F436E037EB0B7214038821B39851DED6B89482C483EF12EED0C9D5F7D5747BA19B68", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626700, "uuid": "c5d6ad93-f35c-4617-be50-7f7ddbc15bae", "value": "98304:gw4fol5qCxwHlJ2NqMLpuJsdEGGTxcHu1kpd:Hqww+N1u2daTqp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736626700, "uuid": "129b45e2-9ed0-4914-b461-892e0563f741", "value": 5149184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626700, "uuid": "c9c553bd-1728-4d47-b51b-ab8ad9297240", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7bb49cf1-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736626821, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626821, "uuid": "2a2487ed-0961-4fac-95b1-1f38128ed661", "comment": "Malware payload", "value": "4cc30fd90a582acdcffa957af45d48f7", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626821, "uuid": "77487f43-78d1-427c-9a31-ccbc88c9e165", "comment": "Malware payload", "value": "30ab33b8353c20887ac2d0e3a9dcd52a154b7ed53dc57a46fd0fd9f11cae9d4e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626821, "uuid": "dd1db0b7-b8bf-41ce-b2d8-d8244a1ba9b6", "value": "T16D047C17B3E900F8D4B34138C8A10B93E37A7465077197FF43E4472AAEA36916E2E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626821, "uuid": "44353197-95a2-42d4-aece-e628c8811f22", "value": "6dbe48ed18383e6ea22fb27020c5f707", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626821, "uuid": "0a167f3c-5e3b-4d65-9dd9-9802dfb67d18", "value": "3072:9aqCLj+Hb9dIbDAZeJNTIGAXJ+mMJl5sUQ7Su8:MqqovIbDA0Jv4J+roS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736626821, "uuid": "a39f77c0-d8b1-4bc7-b64a-f0a692a1ff3a", "value": 177664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626821, "uuid": "173f0e21-6418-46c0-8271-60664118b3cc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca5bea0b-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736626953, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626953, "uuid": "7736d026-52ef-4193-a9c5-1cfb1c696fcd", "comment": "Malware payload", "value": "09321dae1579073822ddf1ca5f839d75", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "TgToxic", "colour": "#55a911", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626953, "uuid": "bb60fcc4-fed5-4243-90de-f70427653c4c", "comment": "Malware payload", "value": "33241ab5fb1be203d3dd67c699fad9a678f893d9693862fb1ff4de0a664008ba", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "TgToxic", "colour": "#55a911", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626953, "uuid": "acf0d774-5bd5-4265-9b29-5d740a24f52f", "value": "T1E836D08AEB845659CDF3A3314D704B6A2A978D514BD7C683FC34732D257B2D08E84A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626953, "uuid": "3791d1bc-91a3-4fc1-a8ca-0723c2081a27", "value": "98304:i3mUMdkaoLKauoPnfVQokMZJt1Q7gONxJSn2:i3mUEpauoPdvkMZO7hSn2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736626953, "uuid": "f6752f54-05e9-42ef-96e9-ba2e4ecac894", "value": 4919985, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626953, "uuid": "1aa9990f-e2af-4ba1-ae75-99c1d16ea120", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54f6aa49-d05a-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736627186, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736627186, "uuid": "3abde2af-9160-4364-83b8-836e5f311f21", "comment": "Malware payload (Mirai)", "value": "16144180b25b1299b8f3210193ab6e71", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736627186, "uuid": "6270fcf0-be7c-4c03-8746-00d5b1f1b0a3", "comment": "Malware payload (Mirai)", "value": "8d1e5633490b31facf5d1fb073a2be07154eba826c31fcb1faab4378dee43964", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736627186, "uuid": "3c8f777d-b83d-43c5-adcc-f906df507bbd", "value": "T19AC3C71BBB620FFBE81ECD3B04A8174534DCAB1621A97B357538D824FA4A54B47D38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736627186, "uuid": "70b387f0-2df3-4731-a7c8-8d8e32015e2d", "value": "3072:peVncToNXQ5KnFzQqaqFvl4B9kS8hAyUX0v7p68:WESz6Kvl4BChAyUX0v7p68", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736627186, "uuid": "e74d922d-4f35-4d90-b3ed-73ac72334e02", "value": 122172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736627186, "uuid": "a311ee8f-3905-4c84-b493-c73aa9115aa5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87857ecd-d05a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736627271, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736627271, "uuid": "9c492807-c3dc-48bb-9a6d-76f84a953e6f", "comment": "Malware payload", "value": "c618cd5a649b133e94ad21adec9b5d0b", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736627271, "uuid": "aa6e05ec-c259-47a4-97fc-9c0e16e83c95", "comment": "Malware payload", "value": "1603c962cec7082a9464194f32f078a9af6056cda7756aa1f26be5018a55a846", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736627271, "uuid": "1170ab8c-2808-4384-a8db-0fb4210fde3e", "value": "T151930946F980A612C2D256B7BB1F028D37155BA8E2DB33439C350B61B3DFA1F1E276", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736627271, "uuid": "43bbbd6b-4cec-474b-aba1-685c36ffd824", "value": "1536:5D/M0Uon6cRSmjV2nuzk0D0Ki+e4bZGGF7FM/ep/dCnjGSAyUX0v7p6d0:m0jx0mjV9z5ij49LtFM/ep/0fAyUX0vA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736627271, "uuid": "674ab91c-c4b8-46ab-81f0-3262b31059b0", "value": 91804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736627271, "uuid": "72edb97a-e747-45f3-bf6e-11caebc1c5b5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d45b6c47-d05a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736627400, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736627400, "uuid": "8f9e1c7f-f07e-4d8a-9dc6-8cf7022a9a20", "comment": "Malware payload", "value": "cd739e7dcbd764a86ccc31c5c838acde", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "TgToxic", "colour": "#55a911", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736627400, "uuid": "c38fc208-bdec-49e8-9dc8-534e607fcc94", "comment": "Malware payload", "value": "c46aa9e631c152568568d462bdd88e60964314b74fbfd586e75e4df6c4e7cbee", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "TgToxic", "colour": "#55a911", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736627400, "uuid": "fa1b727f-c3d9-43ad-bcf3-a54e30d4cebd", "value": "T1E706BF4E77884779F87F40710EAE6E21F48AAC508D8683D7AE2437AE247B5844F975", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736627400, "uuid": "68a85dfd-e143-486e-ae65-ddb5ebee25b6", "value": "49152:ggW7wiy8VlJ1mZt/o1BOM1duFr/nNebPXoLmJj+1fOGnRnJzzvv/7cj00o/MM:21y8VlJ865XoIiOUfLDcjzW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736627400, "uuid": "45ed8889-d8bd-4f16-8288-c83598d1d3f0", "value": 3664396, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736627400, "uuid": "6d4fb2c3-985d-407f-9610-304056fcd613", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33f6718d-d05c-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736627989, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736627989, "uuid": "838756b1-10c2-41cd-a73a-35f0f9f23da5", "comment": "Malware payload (Mirai)", "value": "b0963f7ea11f8efb5bef5552ab9a8cbf", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736627989, "uuid": "a41f64b5-5650-4ef9-9712-53f752b33484", "comment": "Malware payload (Mirai)", "value": "d179a9760bcbc83b52c5eba6430b9b3b6be56e993f9b1a38fab7def5eafa21ba", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736627989, "uuid": "8239561a-260e-409a-ba32-608efc24acc4", "value": "T1F7335BC4E543D8F5ED1701B52137F7768272E5391039EF83C7A9A932E856A80E7263", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736627989, "uuid": "0a502873-49e3-43a7-bf0e-9a3358146d05", "value": "1536:GmuTgrfTjB1ypZBaiw2GwcdXNYfPanUSyA:GhMfpwaivGwclNwSAA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736627989, "uuid": "e1cf3191-db8f-4ac0-85f3-e105afffe98b", "value": 52144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736627989, "uuid": "8e784c83-3700-4c46-bdb2-4a38e0a49d2e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5cca604-d05c-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736628234, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736628234, "uuid": "e4c641ab-977e-44c6-840d-45a2ff26f2ca", "comment": "Malware payload (Mirai)", "value": "20cc06c62de008322c2c635d0e777030", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736628234, "uuid": "8f8aed0d-b2c6-425c-ba18-7972c5277e13", "comment": "Malware payload (Mirai)", "value": "9f85deda5f4991415a6acf3ba3a8091c4ac1fcc4a84f851489fb329df4ba2fa4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736628234, "uuid": "23bd0b57-81ec-4868-a129-36c5bf3c3525", "value": "T13BC3D75D6E164FBDF399873987B78D309218239223B6E680E1ACDD145E603CF680FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736628234, "uuid": "43bda0ca-d6ea-4dcc-8d03-059968d73898", "value": "3072:mk4CLlsUrurrzxREfy/5mtfrm+YrudAyUX0v7p6Ji:mjCLlscurTEfyhmtPYidAyUX0v7p6E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736628234, "uuid": "6e10c037-cb71-409f-9aac-98e201eb1595", "value": 119756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736628234, "uuid": "c51de603-363e-4103-be1c-b681a2f9cb00", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f26ca6c0-d05c-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736628549, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736628549, "uuid": "b35a8df0-c766-4669-9ead-ab07923ae113", "comment": "Malware payload", "value": "b151d347d2f47dad2db0aa029dd6c9dd", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736628549, "uuid": "b525889f-9bb6-4ddb-9b1f-587999731562", "comment": "Malware payload", "value": "5c0ead3d71e0c901aef2a4c7a2ad29212fcb9f8dc49c5e6b524f822ec65511fd", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736628549, "uuid": "dc51ea91-5a45-4951-9e99-8e80dea03294", "value": "T10745332CFA0BDD2AC27D2D7B44940F4091A1A39B1CABED63B04C725657976BBCA11D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736628549, "uuid": "5d0b64ec-8c73-4fa1-be3a-32a64c1e4113", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736628549, "uuid": "d2d32bdd-14cd-4264-b9e9-a4d77f3cc2c6", "value": "24576:RQu06mH2AfjusEQ3MWTwGxXjfAnpiYQ7eVGKtFwVrJa/tXjuD/:3LmH2AfisEQ5XEnpI74arM/tXj+/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736628549, "uuid": "f15ee8f6-d2e8-413f-bd27-4324471adc9e", "value": 1214976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736628549, "uuid": "322a7efe-763d-4793-afdf-70f3cb89f282", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ab57c11-c2bd-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736628796, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736628796, "uuid": "fbcd4f52-ae2b-45fd-852f-2ac56da94e78", "comment": "Malware payload (Mirai)", "value": "ceb5f52262e348be28af48811123af4e", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736628796, "uuid": "f990b305-378e-4b0b-9867-b880d256a655", "comment": "Malware payload (Mirai)", "value": "a32a04f697a396c4d3008947a605c70b6a139d738fc4665e69457b219de59922", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736628796, "uuid": "e54c4649-4416-4628-82b8-a1b400490abb", "value": "T1C6532A51BD829613C6C452BBFB1E428D372713A8E2EA3307EE215F21378796B0E776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736628796, "uuid": "ca462aff-3091-4d2a-ad31-6ca34066bca9", "value": "768:Mc/ULH9PN8VzzeMD1uF4rP3OB+fNu9qErUDM8aVKhZiOjMZ/RH4q8VERewGTkvTM:TULHuzZT+BrVr8a4ZiOjwJ4TWsQvccy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736628796, "uuid": "e4ae99ab-ff1c-4394-a176-85025d7e6561", "value": 64848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736628796, "uuid": "050879d7-c608-4837-bd93-a3f60ff051d8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "865f858b-d05e-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736628987, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736628987, "uuid": "bd9d04b5-71da-4098-8835-f5ca6d543f3a", "comment": "Malware payload (Mirai)", "value": "272b2c04e7e22b3b1326d2ee06665667", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736628987, "uuid": "43e34b47-45b0-4eef-bafb-9519c60ea56b", "comment": "Malware payload (Mirai)", "value": "e65d73c2998382d3a50b68a4040a6bba9469a0c39110f8759012ba41b6e9ce3d", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736628987, "uuid": "4a201f82-424b-4584-b8f3-0f22d2a5d9c8", "value": "T1DE93FA86F881AA11C6C046B7BD2F055E330667A8E2DE7353DD241B64778B95F0F27A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736628987, "uuid": "02802180-229c-4ad4-9816-e7a1f12d4b08", "value": "1536:O/nqQ4DapMaQUwZsTfl7awszSlAo5c6igfR+NMhikX88UGfdinKGSAyUX0v7p6dJ:07JEwszSTh88UGf46AyUX0v7p6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736628987, "uuid": "96a3bc0d-9d20-4509-8693-4d03a9196c96", "value": 92028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736628987, "uuid": "e20817d1-00ce-4fef-9e53-2283ad23edc7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9283b241-d05e-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736629007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736629007, "uuid": "d2edc053-ec8e-46b7-92d9-bab418bd99c7", "comment": "Malware payload", "value": "32c9af4fbb28de08260bb1a90080ce8f", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736629007, "uuid": "bc4f3a01-bc10-408b-b98b-dc8d307a2717", "comment": "Malware payload", "value": "704a3e4b96a19597642b9217d518faacade5399cfcb5303f261d4908529a0c01", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "ua-safari", "colour": "#32eb74", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736629007, "uuid": "4ead42ff-72d7-4e6c-827e-78f2fb41d3f8", "value": "T1617412B3D8ACBD82CE0959F5826160B10C8DFFDF3D8E1676D52B79A83894053B5F06", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736629007, "uuid": "61f88e5b-aa9e-4a3e-a8e8-d0a3b0f3ee34", "value": "6144:hLjH95OWbPby6hPS7qr8e9p0nR1XkPVG6hjSbf65aWM45jJUYs2k16:hLjdlHmO9eR6GYM4Ev16", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736629007, "uuid": "6c3a8198-9a25-4f45-9340-aabc33d7878c", "value": 363074, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736629007, "uuid": "90941e3a-e5ec-4be3-8abc-7c0c019e6deb", "value": "application/zlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10b193f3-d05f-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736629219, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736629219, "uuid": "d88485c2-c9e5-4b3f-957e-cf8c12fb73b2", "comment": "Malware payload (Mirai)", "value": "88803ee42f5bc26ca5d6f31be742633f", "object_relation": "md5", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736629219, "uuid": "8da1c6f5-f1e6-4368-8749-7ba4de78f25c", "comment": "Malware payload (Mirai)", "value": "17e34c256e91b013d5b3ddc49e8011d6c4ad5ca053df27997dd4a2aa29a8abf9", "object_relation": "sha256", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736629219, "uuid": "95b5ac3f-6a19-4947-a440-502be54c72c8", "value": "T18C030943299184FCC858C670DB7FB626DE33F87D1235B24A33E47E266E4BE211E1A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736629219, "uuid": "c0c9bcdd-c123-4f48-8b60-b7c9bbfb38bf", "value": "768:zGYskF3aW6If0YukyvURlyhAf30rb8f87O5qB+P50mS40iyp:JNoabyvUuh83/87OoB+Pc409p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736629219, "uuid": "015b6495-290d-462c-84fa-d57cfd8cff79", "value": 38144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736629219, "uuid": "a4a7a078-e624-474e-a59d-a331c2f95bea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "951c52df-d060-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736629870, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736629870, "uuid": "894f14b0-19dd-466e-a682-0a36bdbf9162", "comment": "Malware payload", "value": "1a107841a127395cd4da7415c7534cce", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736629870, "uuid": "4e488098-b91f-4f84-80ba-a80a53e3fa07", "comment": "Malware payload", "value": "ed81c9633c0a1a53029dbe322b0fbcea646393ca8dd9223ca2505b6cbdd801c8", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736629870, "uuid": "a30a2103-ad0f-4c46-95ca-583093c85263", "value": "T1AE52D1E96378DBDD15C78A90C2CDC6340F52B09A20C229B53CC7ADA0C54129FBE6E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736629870, "uuid": "4ee9981d-a98d-4564-93db-00a4d2601fff", "value": "384:cheCpi1kn9TtkbQjJMIdjtf1cXSjbolKgXjZi+8ZZR:cg8kkjndjEBYUjZi+8Zv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736629870, "uuid": "6ebd60f6-7e34-4f77-a536-63ab3ad49d0d", "value": 14080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736629870, "uuid": "2a0026bd-1179-4a25-ac7d-38202a1d3bca", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43cd9ca4-d062-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736630593, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736630593, "uuid": "e15923da-c232-418e-919e-3fc3343d1ba7", "comment": "Malware payload", "value": "df456e8dcd9c0d634bb4d929947ad4e3", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736630593, "uuid": "3eac720e-360f-469b-9c31-d6ae044921b6", "comment": "Malware payload", "value": "b308990368f3bb72fae104b0617c75017c463c2528ba718c08c05df7e5587b57", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736630593, "uuid": "8009651b-792e-4f04-aaf2-83970d410789", "value": "T1CD849E0252FDE9D0FBBF4A31EE3E86E86AAFB4525E24625D3104571F0B743A1D562B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736630593, "uuid": "a163e41d-49a4-4460-8f46-59e88fcc36cf", "value": "5942941c298654afc856f3a94fb00cae", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736630593, "uuid": "b2e43e26-0bb4-4168-8b25-1f8857ee9359", "value": "6144:ehLM6ghafn4wPSlIYPgoJC1GV9rYnm3GNXtUI3bvsd:exMafnlCPgoJf+nm3GlGILvs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736630593, "uuid": "ab4ff105-1923-48ad-916a-b5cd5eb7fbd5", "value": 405504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736630593, "uuid": "86c5ff68-4bce-4fbd-85c3-897d7cd94a00", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c2f8587-d061-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736630660, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736630660, "uuid": "563e6105-34c6-4f7d-8189-a6ea14d28e1a", "comment": "Malware payload", "value": "449a5052c7721310872e68ddd78817a9", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736630660, "uuid": "9269edaf-542b-4b7f-8e88-7218698cba04", "comment": "Malware payload", "value": "b54350718a5cfb0c5fcdf721436030ece980a9de773907d896cf81d178728271", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736630660, "uuid": "d33b6fd8-2d02-4eac-a4ed-039633c78ae3", "value": "T1CAA4BE1266FDEAD1F7B38A31EE3D86E46A6FB5624E75A25D31542B1F08753A0C4233", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736630660, "uuid": "412e701d-5e63-463b-bd76-b4cd675c025f", "value": "5942941c298654afc856f3a94fb00cae", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736630660, "uuid": "0619126e-fe72-4cc2-bcc8-3b1fbb7f71ed", "value": "6144:V95oxOL+u5jghMzglnvVR1JhzS5v8GKYup/OP2Y2aH37cEkd:V95JLpcln9R1JhOW/OXJYd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736630660, "uuid": "a5f86b01-db28-4482-8b69-12c3ab6fa970", "value": 457728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736630660, "uuid": "a02c8ea1-63b5-422c-9fdd-f217a368a82c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c8d8342-d063-11ef-856f-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1736630983, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736630983, "uuid": "f136aa34-046c-4342-9ae5-d95e2060e7b4", "comment": "Malware payload (CredentialFlusher)", "value": "165f71cd8b9ae5b853b953b20d2fbdf0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736630983, "uuid": "a8ace321-0a67-4985-98c5-ced2a1548791", "comment": "Malware payload (CredentialFlusher)", "value": "d8310bdfa1174f2f9280b21581db79b18cd306e871e8073d130ef48ca4bcb753", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736630983, "uuid": "8fe0ea2a-e7c7-406b-aef1-1e4bc3f68a68", "value": "T1A2259E027391C062FFAB92334F5AF6515BBC69260123E62F13981D79BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736630983, "uuid": "5bcc817e-25a3-473a-94db-f13dbfecdc98", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736630983, "uuid": "6be85844-9cc6-499a-990f-d1dd5ceaee8a", "value": "12288:kqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgailawo:kqDEvCTbMWu7rQYlBQcBiT6rprG8asc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736630983, "uuid": "d65fc485-8485-40c8-9a53-427e67811070", "value": 970240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736630983, "uuid": "9f3a6890-b89a-4d63-95fc-752c78bbbd4e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bfe0ee7c-d066-11ef-856f-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736632519, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736632519, "uuid": "77c74692-1241-4f28-bc53-7ec53457ddcb", "comment": "Malware payload (Mirai)", "value": "3a6cb65c24f5154fab549412228dcef5", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736632519, "uuid": "b1e07bd3-f1f3-42b3-94f9-d9638eb7a17b", "comment": "Malware payload (Mirai)", "value": "9c6902922ac43c7dfcc0d2a98cfb22cdb82b1245cf49df93dc3dbead395075d6", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "HailBot", "colour": "#F1052C", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736632519, "uuid": "1cac7cd5-8266-4bb0-9334-e1484d302d46", "value": "T155532A91FD819612C5C462BBFB5E428D372653A8D2EE3307EE215F21378796B0E3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736632519, "uuid": "d73e4cce-dd7f-40ef-b734-3282f642eb65", "value": "768:79r4UYI88AF5yCoYTXVf76z3l8NuEEJdrvMlrHXTqZpOPLBxMx8wSCb18+wazDwt:F4UY75yw6zqaqRHeZpOPVk82bXIg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736632519, "uuid": "d0db0b94-3612-4480-b08e-35378a008dcf", "value": 62916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736632519, "uuid": "52f33b64-e2e8-40dc-ba62-9e42ea23ed63", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bbc0b754-d061-11ef-856f-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1736632606, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736632606, "uuid": "cd410169-6a84-4d86-a5c8-1032b88fc822", "comment": "Malware payload (GCleaner)", "value": "02eb8887f096734c33b1c90da01f8294", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Nymaim", "colour": "#9738dc", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736632606, "uuid": "20235fb0-d530-4867-99e9-b7431c3893da", "comment": "Malware payload (GCleaner)", "value": "203b0ad333752302c179acfc3e9460bf1a5741db1353fc92dcd01654949ad50f", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Nymaim", "colour": "#9738dc", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736632606, "uuid": "1ab5f7d2-d370-4c28-929d-523d705e8ab8", "value": "T1949533F12CB99833C6F14C7190FB8850761EBC4F84DA977F16801EB66E4325B67E26", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736632606, "uuid": "7b27ca07-9b65-4885-a49d-af9ffa115eb9", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736632606, "uuid": "ff5367f2-2bd5-459b-8ef4-4abfe9ec92d2", "value": "49152:OsJ9BErmWokub2IQpaG0wzg/7k21BrXzW:H+JokNAG08gzP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736632606, "uuid": "d56dd5db-4e60-40fa-9c52-c8aaa46b13e1", "value": 1925632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736632606, "uuid": "4a14a16d-7397-43e4-894b-3626bac246e4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6183e94d-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1736633826, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736633826, "uuid": "66220730-70bd-496a-a9ff-936bdb7b158d", "comment": "Malware payload", "value": "dbc520ea1518748fec9fcfcf29755c30", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736633826, "uuid": "835793ad-d1e1-447c-be91-00bd314d07a7", "comment": "Malware payload", "value": "c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736633826, "uuid": "16547a9a-d54e-4e69-9d16-0f662aad7708", "value": "D2D3128AA536ED54F11B9AF11B3B99907DF5659E82F4D4A4A2CF634312CC343FA4070B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736633826, "uuid": "4d7af278-8556-4927-b6a4-78447f581e0e", "value": "3072:Nc4i0agsmw3Py5CP5HM8EVLUuYtgB5H6oz:Nc/0aNPy54EVAhOae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736633826, "uuid": "2015c229-deae-4834-b925-8e6ae9167c68", "value": 132860, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8af1d9c0-d05a-11ef-afe5-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1736634547, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736634547, "uuid": "786e268a-fe90-4076-9a23-c1f744187924", "comment": "Malware payload (Socks5Systemz)", "value": "305d2627479de982cf5b31d56045ffd8", "object_relation": "md5", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736634547, "uuid": "373a509f-94c5-463e-92b3-750b1cafe170", "comment": "Malware payload (Socks5Systemz)", "value": "32d9a362e98e92a76cb4a9fa48040c52c7437afcd66638a7526d24dfb7054ba8", "object_relation": "sha256", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736634547, "uuid": "fbac9bb8-9ec1-401e-9066-5639af4dd739", "value": "T1EDE53316BA76ECFAF4B644705E64D436535BACD16138B48C70DE849A3B2DFD0832A3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736634547, "uuid": "be232211-ecea-4ed1-9b96-d93dc0ef1d99", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736634547, "uuid": "ab2c8241-714f-462d-8949-f6cd033774d9", "value": "98304:M9BlcGFeC21609r+0vKjHSgcBD9WJmSaPX/33qHxzO+:UBlcGFHiV9rSjHn6J/qRzO+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736634547, "uuid": "ce45eba8-82fa-4060-a5f9-3f976aad8227", "value": 3212648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736634547, "uuid": "5eaedd17-21a4-4cf0-93c2-7e7edf4e928b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02fd4082-d06d-11ef-856f-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736635209, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635209, "uuid": "2bf3348c-0626-437b-81c8-4cc350cd9ad7", "comment": "Malware payload (Gafgyt)", "value": "c2e44493a156e3d840a282a6d6cfdceb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635209, "uuid": "e019bdff-0f4c-477f-b1a3-869d6371763d", "comment": "Malware payload (Gafgyt)", "value": "84dc3fda3b04da894cbce3b97b9c37ed9bfce988d2b4d8797759949126a2ef24", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736635209, "uuid": "8b85a95d-a35d-4406-91ce-d0b4b266d780", "value": "T17693294388219FB7C046A9B125FB1A300767BE220F0F1A89756C9EF4574F5CEB41EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736635209, "uuid": "289c5b6b-7e16-417b-8908-e32b6dc47e57", "value": "1536:1GkrlR7L5uT0MeKErmIThCUeHCCmeCi5hYKOAH/RMnhR09TjUeQfXm:QU7XSERhCU7ef5hYKFHJMhR09TQeQfXm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736635209, "uuid": "a29d42b2-8641-41f5-b792-1fa1fc8119d5", "value": 96451, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736635209, "uuid": "73c41fd7-ac2b-4a6a-9484-db25057504db", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "030c0d2d-d06d-11ef-856f-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736635209, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635209, "uuid": "6f3e0717-0b02-4bc6-8ef1-21b13a5dc60b", "comment": "Malware payload (Gafgyt)", "value": "0da81108dda7493e0ff5bc8e01164c42", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635209, "uuid": "4873242e-552a-4d9b-8c9e-adca2a34d5fd", "comment": "Malware payload (Gafgyt)", "value": "e6bea407a142b201a325e4ad82e43403885f5c0f9329f0f42baa91e935d5095c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736635209, "uuid": "03af8253-1607-4f15-a297-d6af2095c11a", "value": "T1A3D32A06D9509B23C6D227BAF79F528E73236BA897CB331156287EB42FC179D1E391", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736635209, "uuid": "20973002-d6e4-4b35-bb10-3b5a38ed49e9", "value": "3072:di+fUdGdhpceQAYf2OJaHCDWP2bWj8MJ45h8yqGG8aBszafmy/QsYu0Yj/:dANJaHCDJMi5h8yqIaRmy/QsYu0Yj/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736635209, "uuid": "24a79d02-4f53-495e-920b-aa6e19b40d3e", "value": 130492, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736635209, "uuid": "6aa15ce2-956c-4ea1-a69b-80ec40e85850", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "030ed20c-d06d-11ef-856f-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1736635209, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635209, "uuid": "f2282d17-c89e-4923-98c2-35ca2c1e2adc", "comment": "Malware payload (Gafgyt)", "value": "881a7e1397eb54fbaf8275b6cfe63786", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635209, "uuid": "611719ed-b070-4252-bbda-dce17e91f9e2", "comment": "Malware payload (Gafgyt)", "value": "0f183645a025721498a786caba3cef90a30893ad7a92986bebd47ad42ced115a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736635209, "uuid": "3505fab8-87d6-482a-9f6f-3eb2401850a6", "value": "T1F1B3F905FC404B27C7D26BBBF79F428D77366658ABD7330166297EB02BC17982A3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736635209, "uuid": "337d843f-f79e-428e-a99f-7bac0ad1d2d4", "value": "3072:IBD7yqlMQAnoASeg7wUGOTsYV5hY8b6Em7YHQQ/hCOmAD3m:UwUnIYV5hY8bs7YHQQ/hCOmAD3m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736635209, "uuid": "9def4509-3677-4b7f-a4de-3bb94962ee6a", "value": 116658, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736635209, "uuid": "464bd739-64e7-43e7-a386-4d3fe4a82ea7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a46384ea-c75b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1736636700, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736636700, "uuid": "148f3aba-751f-42ce-b0b6-d8430851eb4a", "comment": "Malware payload (Mirai)", "value": "80402d937bf9d31b4d0c6d7d49ca87ac", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736636700, "uuid": "1160bdae-99c5-4ae6-80e6-a29ba67e3ddd", "comment": "Malware payload (Mirai)", "value": "9c006b9ca4b0ba30698ab31b7b40c29c31ef835a63c77be110b3c2b42fa1a5df", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736636700, "uuid": "c0e036c6-5f05-4018-985e-2f80812fa083", "value": "T16173D506BB514EFBDC6BCD3746AA1B4635CC950A22F87B397534C928B54F24B0AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736636700, "uuid": "6fcdd24a-cef6-4c8b-b1c2-a84877ffc67e", "value": "1536:mRGc4bM1TbD9/ngRMypPWPvbCSAZrHnrqZFlhOy:mwsNWpePfAkvhOy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736636700, "uuid": "1effed32-499b-48cf-9666-094f705f8354", "value": 76856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736636700, "uuid": "451bbf33-388e-4300-992e-1ff94fcd6000", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d59b48b2-d070-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736636851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736636851, "uuid": "f2417996-1019-47da-9e03-d03eb8fb4107", "comment": "Malware payload", "value": "1584ad3cce7b7b6976ac1088ad2e18d1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736636851, "uuid": "d604749d-743e-4d4e-8b79-5dae0a30eb2b", "comment": "Malware payload", "value": "1edf76f086e704ad260ffaff09987152fd547efff16a8da95340d646b4f21976", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736636851, "uuid": "18d3a32c-dd13-4d7f-98dd-db60cbcfe862", "value": "T123A3F94AF8816B11C5D511BBFE1F025A33479BA8E3EA72139D241B6477CBA1F0F276", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736636851, "uuid": "e5fc205c-406c-412a-b6e4-18fe41e1f7de", "value": "3072:mLivOEmVlfNNnCTOhtUBaF/FKXgrwiAyUX0v7p6Wk:LUVBCTOhtUBaNFKZiAyUX0v7p6W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736636851, "uuid": "eade3daa-dc19-467d-b949-0db0106ec02c", "value": 104944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736636851, "uuid": "bcc1853f-8a29-401d-bd38-5d0b2cb2761b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05201f50-d071-11ef-856f-82aee05be84a", "comment": "Malware payload (Xorbot)", "timestamp": 1736636930, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736636930, "uuid": "5a8c7955-2bb5-46e1-850e-fbad7e5fc035", "comment": "Malware payload (Xorbot)", "value": "fe4927305816e9610369383e588adcd1", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736636930, "uuid": "0c8b3675-b599-420d-858c-7898c64fd563", "comment": "Malware payload (Xorbot)", "value": "a9755919b893bb536ce9d8a752f982a3eb2fc73972d9e1d7e846a46ec5e49053", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736636930, "uuid": "a1ba2d23-c6a0-4195-a314-def69c889e3e", "value": "T1D32204DF2290F820E9C0479566A5C2E4F009E0C5E8EF6FD8ECCB6DD6914CE26F9C26", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736636930, "uuid": "a70c0531-dbde-4918-aa82-8e7c4f781a0e", "value": "96:En7cfecf2cfgcfvcfjcfKnc0qn7UcQRwbbPoi+V3V+iVnVoV0VR9oIQJRxD0vAjX:EYFtnEwKB0Df4oIK0t7FtnEwo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736636930, "uuid": "d14c1816-6d77-4888-814f-11212c0811d6", "value": 10578, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736636930, "uuid": "859cbba5-8a81-4e20-8b23-ab520e91eb3a", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "585116bd-d071-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736637070, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637070, "uuid": "a591d690-8b55-4077-ba8b-4162eca99b89", "comment": "Malware payload", "value": "08732429dc9ff565f62551e827c3718e", "object_relation": "md5", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637070, "uuid": "803aaaf8-c225-477d-8bd9-514049d02397", "comment": "Malware payload", "value": "888c4ca411fcebb546e83d3b260f527846a03c050c56c4191a03af498898168a", "object_relation": "sha256", "Tag": [ { "name": "185.215.113.16", "colour": "#a42381", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736637070, "uuid": "51b1a3cc-e815-4a75-9013-57e6d5f9ce62", "value": "T150853381AE031107D48C4C37994A92BF5F66E65489AFD97C358AB03CC8E7AD37ADDB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736637070, "uuid": "b533dfbe-3639-49c9-9f35-431e37c003c3", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736637070, "uuid": "bd35f6f4-2394-41d9-9da3-e4510aa17c8f", "value": "24576:l+AIu3+OYz8QdTvmjtoVVkFDHCsNOspRQesuLZOSucwnNfXuPzADywb+h4M9X3bZ:QA93t7QwoVcCaOspjO2BPndj5eUmflu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736637070, "uuid": "5b0291e4-08de-4216-846b-c4027e66a645", "value": 1850880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736637070, "uuid": "40384cd8-0cf4-434e-bbf3-dc4644214900", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a99f8a4d-99d7-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736637409, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637409, "uuid": "dbc72db8-0fb8-4ae0-a093-cca956332dc4", "comment": "Malware payload", "value": "81a9087e8e21a977eead96e5a1b14a18", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "cloudflare", "colour": "#74781d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "python", "colour": "#25a4eb", "exportable": true, "hide_tag": false }, { "name": "webdav", "colour": "#65d452", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637409, "uuid": "a2ee4ba7-8a24-4ccf-aa2b-a01e001d66bb", "comment": "Malware payload", "value": "8fdad5333e382170c136cbe818d4f36980bfc02cb4a3ab484016df7c6c4c8aa4", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "cloudflare", "colour": "#74781d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "python", "colour": "#25a4eb", "exportable": true, "hide_tag": false }, { "name": "webdav", "colour": "#65d452", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736637409, "uuid": "50328c11-c331-4be7-b3ae-688a4b8496cc", "value": "T195A72392A78A0275C5A2FFFD618C0723B50DF549271DB25F253C11E0489E58B1EBBA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736637409, "uuid": "1352dc7a-f89c-4197-88d5-5907db15bb59", "value": "786432:hADXXuC9mkLqH0C1SWvEWbW7ZhG0HQaocLeo0mGzt3:ODngkLqHDxsbVh5waNLglR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736637409, "uuid": "1c5b532b-8091-4057-9fa2-fed93ef0ecdc", "value": 43717652, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736637409, "uuid": "45fe04d1-00d9-4a64-adc4-97186a2b79a0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2d669df-cf32-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1736637485, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637485, "uuid": "bfcbe3c4-f446-46f1-afea-6c2adc950b65", "comment": "Malware payload", "value": "3347998b0628074197bcf76f17b1425f", "object_relation": "md5", "Tag": [ { "name": "cloudflare", "colour": "#74781d", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637485, "uuid": "c488c33a-d336-4734-ad00-37b936b33e5f", "comment": "Malware payload", "value": "43b8e88d15f70f692d759f967500908cd1024f73c2bdc1955f62514408ff7225", "object_relation": "sha256", "Tag": [ { "name": "cloudflare", "colour": "#74781d", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736637485, "uuid": "699afc63-1d7b-485d-a4fe-663b0f979c64", "value": "T1F841F111A3F04332F7760B31EC755476A6733847F911D96D6812822A14B3A609A59F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736637485, "uuid": "4f97e933-5f5c-415c-af2f-691e2ed648a0", "value": "24:83ys5VWVY6/wHcmcnR1E58czhmPCj+7S42JQvMAmR2bzhm6:875VWVf0ch3uzwP7t2J0Q2bzw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736637485, "uuid": "22ad15c1-0b93-47e1-8c73-1134f0dcd3c9", "value": 1932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736637485, "uuid": "6dc23e78-1122-424d-a6e2-b308b583b559", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6d0b5db-7fda-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1736637667, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637667, "uuid": "19a4d133-966e-4d19-b069-fc54150eeac7", "comment": "Malware payload (Hajime)", "value": "5377e8f2ebdb280216c37a6195da9d6c", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637667, "uuid": "1256a48a-6364-4666-972e-e958a2002410", "comment": "Malware payload (Hajime)", "value": "020f1fa6072108c79ed6f553f4f8b08e157bf17f9c260a76353300230fed09f0", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736637667, "uuid": "010565bb-aa35-403f-bdb2-25cbe2e45c35", "value": "21831229135414E5D62681F1D3FD1B84AE981FA9CEE2EC147C12BC89EE333AD3CD2618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736637667, "uuid": "35697f36-aac9-43d0-a64c-c2868f4fbbb5", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V+uBNu:yYI0ARqw1qAEv7UIFM8oJorFquyjkRks", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736637667, "uuid": "2cc33268-d9ec-415d-891b-99c3b0c1744a", "value": 85232, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57bd5a71-d075-11ef-856f-82aee05be84a", "comment": "Malware payload", "timestamp": 1736638787, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736638787, "uuid": "677628f9-cffe-44e1-86c1-138fadcd5305", "comment": "Malware payload", "value": "8c3df00f166dd998c7e338f7cab90b4f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736638787, "uuid": "bd1f6e9f-175e-4fb0-bb82-0017bae3d94a", "comment": "Malware payload", "value": "992bb2fef1e605c206093e311443c61f4d6474ff623526d173efa18997cae48f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736638787, "uuid": "48295ebe-2db8-47fc-ade3-3c9413758f4b", "value": "T1B3259E027391D062FF9B92334F5AF6115BBC69260123E61F13A81D7ABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1736638787, "uuid": "8ffe1c5d-141f-47b2-9dd7-f87c92a407d0", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736638787, "uuid": "8bbe7b85-2282-4be4-9fe5-62ca3e69fc65", "value": "24576:nqDEvCTbMWu7rQYlBQcBiT6rprG8aVDP:nTvC/MTQYxsWR7aVD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736638787, "uuid": "364f2aa8-298b-46b4-a3b7-a1a631d2670a", "value": 971776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736638787, "uuid": "96f82115-85ab-4fc9-9ade-808ffbc06b20", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f04fb47-d076-11ef-856f-82aee05be84a", "comment": "Malware payload (Xorbot)", "timestamp": 1736639202, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1736639202, "uuid": "388267c0-d759-4497-b763-a45a49ec451e", "comment": "Malware payload (Xorbot)", "value": "70e4777ef6d43581bf7d9fbc07e0ebcc", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1736639202, "uuid": "dfd14a81-4d2c-4169-bc89-63ba2aa55230", "comment": "Malware payload (Xorbot)", "value": "b8f3ac068509fcca756a37d6e7668774b475f896c90a1c9ac40f0bf053cf2cec", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1736639202, "uuid": "4f2e87f7-33a8-47c5-90a5-d509ee88b690", "value": "T1512222ED0090BD32AC84875D64B6E1B4A04B80C5DBDF7A90AC8B2E56954CF17FF42B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1736639202, "uuid": "dcd11fe0-3735-4488-a381-6b0f941a5f13", "value": "96:UZ/cfEcfccfgcfvcfjcfSjumqn72+qRwbbPMGgV/V+sVnVoV0VR9sIuvX3D0vALF:UiT7nEwSh0BnesIQO9BT7nEw4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1736639202, "uuid": "b7607df8-4c06-4c7b-a165-97aff8a859c6", "value": 10494, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1736639202, "uuid": "d740e829-b2ca-47b5-819a-ab66df3351b7", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736553727, "uuid": "4c510cf2-cfaf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.234.57.119:3765/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736553786, "uuid": "6f6d8fb6-cfaf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://135.134.54.19:51969/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736553787, "uuid": "6fe209e3-cfaf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.135.201.123:43935/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736553788, "uuid": "704645ea-cfaf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.77.27:59289/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736553788, "uuid": "7092ce75-cfaf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.77.60.11:55723/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736553793, "uuid": "732dd935-cfaf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.197.115.220:54653/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736553803, "uuid": "7922dc79-cfaf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.114.118:53831/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736553805, "uuid": "7a646c61-cfaf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.215.144:45468/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736553806, "uuid": "7af74477-cfaf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.28.160:42789/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736553807, "uuid": "7c181f8d-cfaf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.48.143:34337/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736553815, "uuid": "806a0d8e-cfaf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.111.100.50:60690/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736553815, "uuid": "809a3649-cfaf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.163.250.59:45454/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736554034, "uuid": "02fa51a4-cfb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.85.46:32936/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736554091, "uuid": "25411fd3-cfb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.145.224:57688/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736554267, "uuid": "8e064e6b-cfb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.79.26:36389/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736554267, "uuid": "8e14c684-cfb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.174.44.138:44267/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736554326, "uuid": "b10508b7-cfb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.239.170.12:35049/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736554342, "uuid": "ba7b397b-cfb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.182.199:38394/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736554445, "uuid": "f848f8d2-cfb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.29.93:33093/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736554567, "uuid": "40cad536-cfb1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.168.72:60980/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736554626, "uuid": "63fe864e-cfb1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.168.95:59176/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736554627, "uuid": "648fb8c5-cfb1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.8.34.121:60353/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736555048, "uuid": "5f5883ed-cfb2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.26.209.36:39221/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736555116, "uuid": "881ebfeb-cfb2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.210.229:41395/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736555442, "uuid": "4a7f37d1-cfb3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.38.123.165:56715/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736555591, "uuid": "a367d5ca-cfb3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.97.189:60544/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736555890, "uuid": "55a37c63-cfb4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.37.19:33527/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736556008, "uuid": "9b67a724-cfb4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.182.199:38394/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736556066, "uuid": "be5ae333-cfb4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.111.232.168:44798/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736556186, "uuid": "058d9091-cfb5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.224.174.60:50170/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736556186, "uuid": "05d1db22-cfb5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.8.29.197:41381/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736556246, "uuid": "299f2edf-cfb5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.232.207.188:35090/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736556308, "uuid": "4ebbcc60-cfb5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.168.72:60980/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736556311, "uuid": "501aafe8-cfb5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.84.187:38656/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736556486, "uuid": "b8e3221c-cfb5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.79.26:36389/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736556608, "uuid": "018eb8d0-cfb6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.119.42:45266/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736556728, "uuid": "48ab5310-cfb6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.203.19:41433/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736556728, "uuid": "490bff93-cfb6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.39.128.209:54223/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736556787, "uuid": "6c099208-cfb6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.8.29.197:41381/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736556846, "uuid": "8f0ee337-cfb6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.176.34:58574/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736556846, "uuid": "8f63c1ec-cfb6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.139.226:36775/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736557211, "uuid": "68a80bb8-cfb7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.108.66:55938/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736557221, "uuid": "6e9ec673-cfb7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.90.113:40901/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736557398, "uuid": "d877a0ad-cfb7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.248.177:44256/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736557447, "uuid": "f51f04f5-cfb7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.34.164:44755/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736557566, "uuid": "3c2635b8-cfb8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.187.238:48046/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736557566, "uuid": "3ca1e91b-cfb8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.99.0:59544/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736557628, "uuid": "617b1494-cfb8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.37.173.232:32907/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736557629, "uuid": "619fa2fa-cfb8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.57.173.69:50093/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736557654, "uuid": "70f4f7c6-cfb8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.248.15.26:40612/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736557654, "uuid": "70f5effd-cfb8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.233.58.217:40096/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736557808, "uuid": "ccdcda82-cfb8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.119.42:45266/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736557927, "uuid": "133959fa-cfb9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.96.59:38443/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736557927, "uuid": "1342f7bd-cfb9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.203.19:41433/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736557927, "uuid": "13489adb-cfb9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.84.187:38656/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736557927, "uuid": "135d7f3e-cfb9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.37.173.232:32907/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736557992, "uuid": "3a4f779d-cfb9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.247.157:38195/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736558226, "uuid": "c5fca23f-cfb9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.39.128.209:54223/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736558286, "uuid": "e9bdb7b8-cfb9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.167.218:50092/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736558287, "uuid": "e9d63da7-cfb9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.176.34:58574/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736558348, "uuid": "0e400d04-cfba-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.63.13:48461/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736558712, "uuid": "e791fef9-cfba-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.74.46.147:42950/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736558766, "uuid": "079c4f95-cfbb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.96.59:38443/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736558827, "uuid": "2bf5f9cc-cfbb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.218.65:39276/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736558946, "uuid": "72f6d0e1-cfbb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.248.177:44256/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736559014, "uuid": "9b6ed84f-cfbb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.108.66:55938/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736559133, "uuid": "e20bfb62-cfbb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.187.238:48046/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736559223, "uuid": "17b7a511-cfbc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.83.153:55815/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736559314, "uuid": "4e42f994-cfbc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.34.164:44755/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736559546, "uuid": "d88347a8-cfbc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.247.157:38195/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736559609, "uuid": "fde78aba-cfbc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.171.17:42897/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736559623, "uuid": "06a4ddd2-cfbd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.218.90:51956/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736559727, "uuid": "44821921-cfbd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.56.197:51793/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736559808, "uuid": "74822a72-cfbd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.7.3:33962/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736559909, "uuid": "b0b8a592-cfbd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.234.80:60447/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736559966, "uuid": "d2e8cac7-cfbd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.189.114:33863/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736560087, "uuid": "1b0451a1-cfbe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.7.33:49016/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736560148, "uuid": "3f18be31-cfbe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.136.208:46617/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736560213, "uuid": "6601c818-cfbe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.74.46.147:42950/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736560386, "uuid": "cd0cd25b-cfbe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.116.6:59423/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736560386, "uuid": "cd6f9a4b-cfbe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.134.159:46110/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736560446, "uuid": "f13f2975-cfbe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.249.202:41362/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736560447, "uuid": "f1754ba2-cfbe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.9.99:59351/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736560567, "uuid": "38d21ef6-cfbf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.38.150:42103/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736560626, "uuid": "5c4e577d-cfbf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.229.94:53646/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736560627, "uuid": "5d01a5bb-cfbf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.43.9:42766/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736560686, "uuid": "800d3fe0-cfbf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.174.117:34992/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736560747, "uuid": "a48584d3-cfbf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.26.50.140:48392/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736560809, "uuid": "c97bfc2c-cfbf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.139.210:57012/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736560883, "uuid": "f582e645-cfbf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.51.195:49413/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736561046, "uuid": "56ba5bc3-cfc0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.136.91:57672/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736561135, "uuid": "8bbd3153-cfc0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.183.198:55799/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736561226, "uuid": "c1eb444b-cfc0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.193.43:51287/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736561226, "uuid": "c1fc54a4-cfc0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.61.181.52:42254/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736561227, "uuid": "c25415dc-cfc0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.215.74:39749/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736561416, "uuid": "32d37551-cfc1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.21.159:52498/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736561587, "uuid": "98c2742f-cfc1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.55.30:33342/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736561708, "uuid": "e106c2e3-cfc1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.116.6:59423/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736561766, "uuid": "03dda25e-cfc2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.79.7:51810/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736561827, "uuid": "2800a32e-cfc2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.43.9:42766/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736561886, "uuid": "4afdbd41-cfc2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.247.55:45886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736562011, "uuid": "95b3c0eb-cfc2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.153.139:47250/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736562128, "uuid": "dbb31be6-cfc2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.249.202:41362/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736562187, "uuid": "fec11a20-cfc2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.146.146:59549/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736562188, "uuid": "ff0e11d9-cfc2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.229.94:53646/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736562247, "uuid": "22a15e47-cfc3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.107.44:43888/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736562248, "uuid": "22d41252-cfc3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.178.216:42878/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736562261, "uuid": "2a99ed22-cfc3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.121.108:58134/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736562308, "uuid": "4710d4ea-cfc3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.174.117:34992/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736562309, "uuid": "4799d736-cfc3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.211.83:35071/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736562446, "uuid": "98c7181e-cfc3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.9.163:33914/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736562487, "uuid": "b170667c-cfc3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.136.91:57672/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736562487, "uuid": "b18db034-cfc3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.41.165:57725/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736562500, "uuid": "b90bf578-cfc3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.90.75:44895/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736562967, "uuid": "cf52523b-cfc4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.139.210:57012/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736562967, "uuid": "cf6ab058-cfc4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.41.57:46217/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563087, "uuid": "16d08594-cfc5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.138.237:37669/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563267, "uuid": "82322eab-cfc5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.237.250:33408/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563305, "uuid": "99278b27-cfc5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.22.126:60919/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563326, "uuid": "a57c1553-cfc5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.151.131.5:34368/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563339, "uuid": "ad942fde-cfc5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.123.80:42310/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563346, "uuid": "b15799ec-cfc5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.67.55:45926/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563386, "uuid": "c91e5b9f-cfc5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.145.153:43092/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563386, "uuid": "c9713931-cfc5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.90.75:44895/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563386, "uuid": "c987d573-cfc5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.229.49:42869/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563447, "uuid": "eda0a608-cfc5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.71.17:35127/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563447, "uuid": "edde141a-cfc5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.88.12:49360/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563511, "uuid": "13ea9ff6-cfc6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.71.142:49925/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563566, "uuid": "34da7df0-cfc6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.153.139:47250/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563745, "uuid": "9f29dbc5-cfc6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.58.168.32/a", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563746, "uuid": "a00f4737-cfc6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.211.83:35071/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563747, "uuid": "a06554bc-cfc6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.230.20.57:44759/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563750, "uuid": "a24513df-cfc6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.218.13:36522/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563751, "uuid": "a2dcebaa-cfc6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.58.168.32/yakuza.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563751, "uuid": "a2e339ee-cfc6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.58.168.32/v", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563810, "uuid": "c5de9c90-cfc6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.19.24.68/arm5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563810, "uuid": "c5e6c655-cfc6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.19.24.68/m68k", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563810, "uuid": "c5ee7970-cfc6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.19.24.68/sh4", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563810, "uuid": "c5ef04b3-cfc6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.19.24.68/av.sh", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563810, "uuid": "c5f7c598-cfc6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.19.24.68/ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563827, "uuid": "cff7676b-cfc6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.16.213:38528/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563866, "uuid": "e771274d-cfc6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://pirati.privatedns.org/a", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563867, "uuid": "e7fbc15a-cfc6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.19.24.68/arm6", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563867, "uuid": "e802fbc2-cfc6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.19.24.68/mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563867, "uuid": "e83561d9-cfc6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.19.24.68/harm", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563869, "uuid": "e929f727-cfc6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.19.24.68/x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563929, "uuid": "0cb53210-cfc7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.235.147:47927/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563930, "uuid": "0dd98db2-cfc7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.19.24.68/mips", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736563931, "uuid": "0de4fb15-cfc7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.19.24.68/spc", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736564165, "uuid": "99e1b9ca-cfc7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.27.133:51786/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736564226, "uuid": "bdeeab65-cfc7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.136.208:46617/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736564409, "uuid": "2b527ccd-cfc8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.21.218:60988/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736564468, "uuid": "4e770ddb-cfc8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.41.57:46217/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736564469, "uuid": "4ed7959e-cfc8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.9.148:58394/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736564485, "uuid": "58733288-cfc8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.252.23:53934/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736564530, "uuid": "72ed65b2-cfc8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.209.91:35152/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736564587, "uuid": "94f0339a-cfc8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.178.159:46779/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736564617, "uuid": "a7367a3b-cfc8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://43.230.156.14:58567/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736564707, "uuid": "dc800e4c-cfc8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.233.99:49333/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736564765, "uuid": "ff27304c-cfc8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.145.153:43092/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736564769, "uuid": "01f4c854-cfc9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.16.213:38528/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736564826, "uuid": "23b866bb-cfc9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.237.250:33408/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736564946, "uuid": "6b44251f-cfc9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.21.172.18:39137/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736564947, "uuid": "6be1612e-cfc9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.163.140:23229/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736565066, "uuid": "b2846659-cfc9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.229.49:42869/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736565126, "uuid": "d6b3db28-cfc9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.173.222:54263/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736565187, "uuid": "fadfa254-cfc9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.107.237:55679/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736565262, "uuid": "273a3667-cfca-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.140.159:52255/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736565309, "uuid": "4366a889-cfca-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.218.13:36522/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736565367, "uuid": "663a85de-cfca-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.27.133:51786/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736565368, "uuid": "66739d00-cfca-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.235.147:47927/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736565375, "uuid": "6b00fefc-cfca-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.95.162:45890/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736565382, "uuid": "6f2660ed-cfca-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.74.117:33283/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736565427, "uuid": "89bc77f3-cfca-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.241.206:33006/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736565434, "uuid": "8e5325d8-cfca-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.194.179:50941/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736565575, "uuid": "e20b61a7-cfca-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.141.202:50890/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736565727, "uuid": "3ca6fef8-cfcb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.9.243:34528/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736565785, "uuid": "5f3fe4a3-cfcb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.248.15.26:41471/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736565786, "uuid": "5f91a250-cfcb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.224.44:41519/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736565786, "uuid": "600bf956-cfcb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.27.81.182:54285/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736565800, "uuid": "686121fe-cfcb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.93.228:37175/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736565966, "uuid": "cb013781-cfcb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.27.199.101:57792/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736565966, "uuid": "cb174483-cfcb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.238.174:58364/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736565967, "uuid": "cbb11c02-cfcb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.21.218:60988/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736565977, "uuid": "d1e34d53-cfcb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.171.46:58031/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736566026, "uuid": "eee4ef01-cfcb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://174.76.179.235:33354/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736566086, "uuid": "12d59bd3-cfcc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.233.99:49333/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736566087, "uuid": "12ff0a8d-cfcc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.9.148:58394/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736566213, "uuid": "5e3acb21-cfcc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.27.199.101:57792/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736566213, "uuid": "5e699c63-cfcc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.37.219:34642/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736566275, "uuid": "83429c4e-cfcc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.19.178:60016/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736566275, "uuid": "839704ce-cfcc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.139.93:54475/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736566512, "uuid": "10983eef-cfcd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.173.222:54263/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736566513, "uuid": "1127b6dc-cfcd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.202.150:56725/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736566626, "uuid": "5464f7da-cfcd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.61.181.52:42254/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736566866, "uuid": "e3bfb042-cfcd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.74.117:33283/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736566873, "uuid": "e7933290-cfcd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.244.169.107:32880/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736566927, "uuid": "07a481b2-cfce-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.119.104:48236/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736567109, "uuid": "747a98d2-cfce-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.141.202:50890/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736567167, "uuid": "970cf2ab-cfce-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.37.30:48464/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736567226, "uuid": "ba70b40f-cfce-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.139.93:54475/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736567287, "uuid": "de65bba5-cfce-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.132.106:49877/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736567297, "uuid": "e43cff1b-cfce-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.184.97:59419/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736567347, "uuid": "02844e86-cfcf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://174.76.179.235:33354/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736567409, "uuid": "272e580e-cfcf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.99.60:52725/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736567586, "uuid": "907e481e-cfcf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.97.114:57275/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736567829, "uuid": "2145ed61-cfd0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.241.206:33006/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736567836, "uuid": "25cb61c9-cfd0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.32.182:34699/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736567887, "uuid": "441e8963-cfd0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.20.14:33784/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736568187, "uuid": "f6c9e20b-cfd0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.231.103:52873/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736568187, "uuid": "f6ef54c7-cfd0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.213.214:42313/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736568264, "uuid": "2500d1b1-cfd1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.173.15:52742/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736568367, "uuid": "6267b0f2-cfd1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.224.148:50132/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736568367, "uuid": "628481c9-cfd1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.185.39:36168/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736568488, "uuid": "aa42561a-cfd1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.188.200:59331/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736568546, "uuid": "cd19e2b5-cfd1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.235.99:47677/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736568725, "uuid": "37b11d7f-cfd2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.37.30:48464/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736568846, "uuid": "7fc38bf5-cfd2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.220.56:51978/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736568847, "uuid": "800ba753-cfd2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.20.14:33784/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736568910, "uuid": "a5fe22f2-cfd2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.13.70:26290/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736568967, "uuid": "c7ead637-cfd2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.218.202:46440/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736569147, "uuid": "3361ec22-cfd3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.97.114:57275/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736569266, "uuid": "7a1fea4b-cfd3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.213.214:42313/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736569266, "uuid": "7a245ae8-cfd3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.181.166:54860/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736569387, "uuid": "c1faf813-cfd3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.12.196:48017/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736569577, "uuid": "33a0f17e-cfd4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.60.57:48830/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736569625, "uuid": "5044d40a-cfd4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.231.103:52873/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736569933, "uuid": "075914ce-cfd5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.188.200:59331/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736569936, "uuid": "09afd412-cfd5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.218.202:46440/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736570036, "uuid": "45205e0e-cfd5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.65.233:33090/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736570054, "uuid": "4fe4bd70-cfd5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.202.150:56725/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736570586, "uuid": "8c97d3dd-cfd6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.22.186:35717/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736570707, "uuid": "d522b00f-cfd6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.181.166:54860/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736570767, "uuid": "f8f0a391-cfd6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.154.222:40913/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736570947, "uuid": "63cac344-cfd7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.123.152:47519/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736571126, "uuid": "ce90f3ac-cfd7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.142.22.231:33034/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736571126, "uuid": "ce91c9d7-cfd7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.117.246:38482/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736571366, "uuid": "5dc4f694-cfd8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.231.139:59399/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736571485, "uuid": "a4e511cc-cfd8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.235.99:47677/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736571545, "uuid": "c8b3a457-cfd8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.5.39:33607/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736571609, "uuid": "eece15e7-cfd8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.8.25:38278/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736572025, "uuid": "e66dd66d-cfd9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.178.159:46779/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736572146, "uuid": "2e99b51a-cfda-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.123.152:47519/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736572162, "uuid": "38262c1c-cfda-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.5.39:33607/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736572403, "uuid": "c8051d40-cfda-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.25.22:33289/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736572445, "uuid": "e11ebe53-cfda-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.57.173.69:50093/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736572446, "uuid": "e17ecd09-cfda-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.238.222:55734/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736572465, "uuid": "ecf49b1a-cfda-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.100.173:53233/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736572508, "uuid": "06ac52b8-cfdb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.8.25:38278/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736572686, "uuid": "70c0fdeb-cfdb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.146.112:38576/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736572746, "uuid": "947eb9c3-cfdb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.31.63:40706/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736572913, "uuid": "f7fa3c12-cfdb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.92.13:57759/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736573046, "uuid": "46f92a98-cfdc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.250.198.87:33927/Mozi.m", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736573046, "uuid": "47405be4-cfdc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.117.246:38482/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736573047, "uuid": "47b48763-cfdc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.59.138:46982/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736573047, "uuid": "47bcdb31-cfdc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.31.206:44162/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736573048, "uuid": "485a2400-cfdc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.133.38.163:38193/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736573051, "uuid": "4a0bc563-cfdc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.251.82.160:20722/b/mipsel", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736573285, "uuid": "d5af0f53-cfdc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.142.22.231:33034/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736573426, "uuid": "29d59b0b-cfdd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.126.49:59010/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736573470, "uuid": "44129a05-cfdd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.9.99:59351/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736573593, "uuid": "8d64e39e-cfdd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.177.200.61:54919/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736574027, "uuid": "8fec8ce3-cfde-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.55.82:33008/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736574065, "uuid": "a6c87c14-cfde-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.100.173:53233/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736574066, "uuid": "a6d6c35b-cfde-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.47.226:33906/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736574080, "uuid": "af6ca6a3-cfde-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.94.147:58777/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736574442, "uuid": "8738e9d5-cfdf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.255.185:38598/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736574443, "uuid": "879561f9-cfdf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.92.131:52284/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736574486, "uuid": "a13009cc-cfdf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.31.63:40706/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736574546, "uuid": "c4feefb1-cfdf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.136.52:41765/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736574727, "uuid": "310e9064-cfe0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.42.158:37104/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736574728, "uuid": "31a9c256-cfe0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.232.191:48711/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736574785, "uuid": "538ac33a-cfe0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.31.206:44162/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736574785, "uuid": "53cd8987-cfe0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.92.13:57759/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736574908, "uuid": "9cd8578f-cfe0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.58.150:51248/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736574966, "uuid": "bf74fc0f-cfe0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.249.29:44820/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736575210, "uuid": "50b24d08-cfe1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.86.194:47490/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736575212, "uuid": "521bbf98-cfe1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.177.200.61:54919/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736575266, "uuid": "7288c2e6-cfe1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.189.238.136:44388/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736575326, "uuid": "963d4037-cfe1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.225.66:40102/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736575386, "uuid": "ba05ea58-cfe1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.94.193.116:40049/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736575387, "uuid": "ba49b002-cfe1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.29.93:33093/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736575387, "uuid": "bac076d3-cfe1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.141.14:57380/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736575393, "uuid": "bdeefaee-cfe1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.208.231.68:49090/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736575394, "uuid": "be8b5f48-cfe1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.138.12.156:33371/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736575415, "uuid": "cae7582d-cfe1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.208.231.115:58357/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736575415, "uuid": "cb194a32-cfe1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.60.50:34464/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736575453, "uuid": "e1d614b2-cfe1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.94.147:58777/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736575509, "uuid": "0328cd1f-cfe2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.166.125:59286/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736575687, "uuid": "6d101eff-cfe2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.131.58:41167/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736575688, "uuid": "6d9d2b16-cfe2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.113.130.147:58243/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736575747, "uuid": "91143ecf-cfe2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.229.60:32805/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736575809, "uuid": "b602e0c3-cfe2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.233.43:43670/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736575842, "uuid": "c9936bb1-cfe2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.244.102:41600/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736575866, "uuid": "d818b266-cfe2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.223.109:45080/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736576109, "uuid": "68e48e44-cfe3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.236.118:33763/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736576109, "uuid": "68e66c95-cfe3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.13.178:35576/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736576166, "uuid": "8a8c18b3-cfe3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.23.27:56664/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736576182, "uuid": "944a4c7c-cfe3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.159.61:41705/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736576286, "uuid": "d24b1869-cfe3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.50.125:47599/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736576409, "uuid": "1b5e7284-cfe4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.58.150:51248/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736576410, "uuid": "1c0375be-cfe4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.81.133:41347/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736576428, "uuid": "26daeb9a-cfe4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.210.216:53540/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736576526, "uuid": "61173ab0-cfe4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.249.29:44820/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736576527, "uuid": "61b8208a-cfe4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.113.130.147:58243/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736576645, "uuid": "a8818f35-cfe4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.252.196.162:40055/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736577127, "uuid": "c7d66f1e-cfe5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.223.109:45080/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736577128, "uuid": "c80f2286-cfe5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.255.83:48811/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736577443, "uuid": "83eed92f-cfe6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.14.43:41412/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736577485, "uuid": "9ccfc3c3-cfe6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://qualquercoisa.a890027-blog.net/jxnyegdizllafwlw", "Tag": [ { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736577486, "uuid": "9dc6dd16-cfe6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://tnow-prod-apac.367791ca7abea81096902b345fee7b1f.r2.cloudflarestorage.com/2025-01-09/f58401ea515a4da564cb721a32f4b159/20250109LLCbEyg3/qS9wU5/dc-dual-force-run.zip?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=882af22225f5a3c718a96ffd4ac141a1%2F20250110%2Fauto%2Fs3%2Faws4_request&X-Amz-Date=20250110T214015Z&X-Amz-Expires=120&X-Amz-Signature=3093c7b458541870404bf7df3cca69e21e6d8d6f27c79721a5bffa9996e02b6f&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3D%22dc-dual-force-run.zip%22&x-id=GetObject", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736577574, "uuid": "d2306b43-cfe6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.21.78:58017/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736577728, "uuid": "2dd2980b-cfe7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.204.41:42008/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736577786, "uuid": "50865b1a-cfe7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.210.216:53540/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736577848, "uuid": "75805f1c-cfe7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.44.71:34623/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736577916, "uuid": "9e22ec4b-cfe7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.116.122.135:21587/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736578086, "uuid": "0373fa7f-cfe8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.112.39:34349/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736578223, "uuid": "54a94984-cfe8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.87.66:50940/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736578266, "uuid": "6e64cac2-cfe8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.229.60:32805/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736578283, "uuid": "78c29ded-cfe8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.188.150:55034/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736578445, "uuid": "d9552105-cfe8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.222.191.91/x.sh", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736578446, "uuid": "d9819bd8-cfe8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.255.83:48811/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736578508, "uuid": "feafe1cd-cfe8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.245.183:36321/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736578510, "uuid": "000a8a2a-cfe9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.235.175.195:52191/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736578627, "uuid": "457d2e76-cfe9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.204.41:42008/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736578744, "uuid": "8ba8c2fe-cfe9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.148.245.96:53036/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736578874, "uuid": "d8d534f1-cfe9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.240.63.65:36269/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736579047, "uuid": "404415c5-cfea-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.14.43:41412/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736579048, "uuid": "405e32de-cfea-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.239.84:40610/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736579225, "uuid": "aa565f59-cfea-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.232.18:52482/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736579408, "uuid": "171ee59a-cfeb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.9.246:48101/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736579409, "uuid": "1780fe50-cfeb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.44.71:34623/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736579525, "uuid": "5d2e96d6-cfeb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.112.39:34349/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736579586, "uuid": "813a7527-cfeb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.239.84:40610/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736579586, "uuid": "815d1999-cfeb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.29.28.117:37773/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736579707, "uuid": "c97f98a6-cfeb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.9.246:48101/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736579707, "uuid": "c99835df-cfeb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.188.150:55034/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736579826, "uuid": "107f29ce-cfec-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.215.89:40120/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736579827, "uuid": "1125553b-cfec-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.227.157.75:9145/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736579896, "uuid": "39dec16e-cfec-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.107.221:53519/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736580246, "uuid": "0acb4fec-cfed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.245.183:36321/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736580547, "uuid": "be0c1411-cfed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.78.82:44581/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736580849, "uuid": "71f5311c-cfee-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.29.28.117:37773/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736580912, "uuid": "9758600b-cfee-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.240.63.65:36269/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736581025, "uuid": "db47255d-cfee-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.241.106:49655/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736581086, "uuid": "ff624bd0-cfee-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.114.145:41893/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736581209, "uuid": "48dc09d9-cfef-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.41.31:47582/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736581210, "uuid": "49030695-cfef-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.101.39:58158/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736581217, "uuid": "4d3aa480-cfef-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.118.124.16:36784/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736581268, "uuid": "6bdaa8c6-cfef-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.47.168:41176/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736581404, "uuid": "bd1efaf1-cfef-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.13.28:45160/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736581808, "uuid": "adcacd48-cff0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.78.82:44581/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736581925, "uuid": "f3a478d3-cff0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.95.148:47321/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736581987, "uuid": "1831cd45-cff1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.107.207:55274/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736582410, "uuid": "14604e68-cff2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.46.251:36770/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736582468, "uuid": "37013434-cff2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.47.168:41176/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736582655, "uuid": "a67f7a8a-cff2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.58.153.186:49004/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736582767, "uuid": "e973dfcc-cff2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.47.165:46629/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736583127, "uuid": "bff6e766-cff3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.13.28:45160/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736583186, "uuid": "e33a4208-cff3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.82.229:40566/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736583246, "uuid": "06b02870-cff4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.86.206:57547/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736583426, "uuid": "7240bbf9-cff4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.107.207:55274/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736583667, "uuid": "01eb853e-cff5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.175.55.60:6761/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736583684, "uuid": "0bc73f5d-cff5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.54.232:50831/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736583742, "uuid": "2e9c7aa6-cff5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.29.227:48005/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736583786, "uuid": "48b5be2a-cff5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.85.46:32936/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736584026, "uuid": "d7e4cf38-cff5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.103.150:60743/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736584042, "uuid": "e15fdde1-cff5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.252.40:49322/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736584333, "uuid": "8ea13802-cff6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.58.153.186:49004/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736584390, "uuid": "b0689d5c-cff6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.86.206:57547/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736584808, "uuid": "aa1fe6d2-cff7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.82.229:40566/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736584821, "uuid": "b1796108-cff7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.91.44:41074/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736584868, "uuid": "cd54c358-cff7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.59.110:36988/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736584926, "uuid": "f03bc212-cff7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.92.207.90:53537/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736585409, "uuid": "0fe1513d-cff9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.9.123:47045/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736585587, "uuid": "79ec2208-cff9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.242.250:46325/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736586184, "uuid": "de3cabcb-cffa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.178.148:10846/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736586184, "uuid": "de3fa0a2-cffa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.178.134:10206/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736586184, "uuid": "de400b7d-cffa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.178.81:10071/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736586186, "uuid": "df2b2e50-cffa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.180.37.141:45497/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736586196, "uuid": "e571e498-cffa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.35.136.233:38486/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736586199, "uuid": "e72ac614-cffa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.99.83:39204/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736586214, "uuid": "f027209e-cffa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.168.120.183:52291/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736586214, "uuid": "f028cf2c-cffa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.35.0.6:60922/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736586227, "uuid": "f7982808-cffa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.93.232:56502/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736586228, "uuid": "f87f5471-cffa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.32.49:43714/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736586252, "uuid": "06a17667-cffb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.45.148:40908/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736586255, "uuid": "086b1535-cffb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.208.62.112:36522/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736586425, "uuid": "6ddb12df-cffb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.92.207.90:53537/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736586426, "uuid": "6e778ee3-cffb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.22.186:40485/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736586726, "uuid": "210fa943-cffc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.22.186:40485/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736586726, "uuid": "21167ab5-cffc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.49.172:55792/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736586726, "uuid": "212fd6c9-cffc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.62.68:51486/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736586845, "uuid": "67b02561-cffc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://electricreport.org/ygd4g?", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736586846, "uuid": "68d05b9e-cffc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://admin.bookrepluguest.com/confirm/login/lufzVyPe", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736586850, "uuid": "6abb7e8b-cffc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://staplebrokenmetaliyro.blogspot.com/", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587043, "uuid": "ddb915eb-cffc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.161.9:34883/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587069, "uuid": "ed5bad26-cffc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.152.49:50061/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587088, "uuid": "f8e7d76a-cffc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.208.62.112:36522/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587266, "uuid": "62a8abdd-cffd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.64.101:42110/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587446, "uuid": "ce1086f5-cffd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.64.101:42110/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587447, "uuid": "cf111e8c-cffd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.40.169:54455/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587686, "uuid": "5d7e9213-cffe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.252.202:59008/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587699, "uuid": "654c786f-cffe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.102.221:49091/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587816, "uuid": "aa9c7259-cffe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.81.47.243/hiddenbin/Space.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587816, "uuid": "aaa63791-cffe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.81.47.243/hiddenbin/Space.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587816, "uuid": "aaab7f2d-cffe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.81.47.243/hiddenbin/Space.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587816, "uuid": "aaadd24b-cffe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.81.47.243/hiddenbin/Space.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587816, "uuid": "aaaeb397-cffe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.81.47.243/hiddenbin/Space.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587816, "uuid": "aab3d41e-cffe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.81.47.243/hiddenbin/Space.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587816, "uuid": "aab5fe5c-cffe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.81.47.243/hiddenbin/Space.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587816, "uuid": "aabb6985-cffe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.81.47.243/hiddenbin/Space.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587816, "uuid": "aabb73d2-cffe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.81.47.243/hiddenbin/Space.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587875, "uuid": "ce240404-cffe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.49.172:55792/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587876, "uuid": "ce3f2788-cffe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.81.47.243/hiddenbin/Space.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587876, "uuid": "ce435110-cffe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.81.47.243/hiddenbin/Space.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736587876, "uuid": "ce4fa0e1-cffe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.81.47.243/hiddenbin/Space.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736588010, "uuid": "1e2be5f2-cfff-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.42.198:60650/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736588227, "uuid": "9fc66730-cfff-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.81.33:59560/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736588467, "uuid": "2e95b385-d000-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.169.234.10:43321/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736588467, "uuid": "2eaec5fc-d000-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.58.114:56152/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736588476, "uuid": "342174a8-d000-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.211.202:59498/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736588533, "uuid": "56658d63-d000-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.161.9:34883/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736588708, "uuid": "be210c23-d000-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.78.13:48709/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736588767, "uuid": "e1d88fe4-d000-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.40.169:54455/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736588767, "uuid": "e1dbd2f1-d000-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.9.123:47045/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736589186, "uuid": "db24f856-d001-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.183.198:55799/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736589366, "uuid": "4652c7ec-d002-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.85.137:45142/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736589366, "uuid": "468b34de-d002-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.226.10:42581/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736589367, "uuid": "4733d67b-d002-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.20.75.98:34803/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736589395, "uuid": "579f8318-d002-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.13.57.190:50458/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736589553, "uuid": "b61a9072-d002-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.42.198:60650/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736589611, "uuid": "d8b1aac8-d002-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.38.106.89:52300/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736589667, "uuid": "fa2a13ee-d002-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.81.33:59560/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736589966, "uuid": "ac4d149c-d003-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.153.184.80:25093/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736590026, "uuid": "cfeb2382-d003-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.71.139:42749/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736590087, "uuid": "f46de6e8-d003-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.101.108:36083/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736591108, "uuid": "54dbcdc9-d006-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.38.106.89:52300/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736591166, "uuid": "77659873-d006-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.249.246:43612/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736591168, "uuid": "789c711a-d006-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.20.75.98:34803/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736591184, "uuid": "8273ca83-d006-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.17.165:51755/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736591347, "uuid": "e318ccea-d006-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.38.22:43952/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736591767, "uuid": "dd7293d8-d007-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.33.106:50725/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736591904, "uuid": "2f3eddc0-d008-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.153.121:52941/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736592008, "uuid": "6d43dd6b-d008-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://79.124.40.48/bins/res.x86", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736592186, "uuid": "d7832ea9-d008-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.39.31:36109/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736592186, "uuid": "d7852b39-d008-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://135.134.54.19:51969/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736592187, "uuid": "d7d32012-d008-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.12.13:53929/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736592246, "uuid": "fb5d753b-d008-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.38.22:43952/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736592310, "uuid": "213ba17e-d009-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.71.139:42749/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736592366, "uuid": "42b72a05-d009-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.9.252.172:59029/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736592370, "uuid": "45509780-d009-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.208.57.163:50206/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736592503, "uuid": "948daad5-d009-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.220.116:48702/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736592908, "uuid": "85963181-d00a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.31.246.124:57989/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736592919, "uuid": "8c2ced2d-d00a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.252.125:56743/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736592965, "uuid": "a8106668-d00a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.12.13:53929/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736593085, "uuid": "ef3c4568-d00a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.250.198.87:33927/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736593209, "uuid": "39800d4f-d00b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.225.217:46056/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736593626, "uuid": "31d4e167-d00c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.39.31:36109/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736593626, "uuid": "31e9b9ca-d00c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.120.130:33251/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736593746, "uuid": "79815b53-d00c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.9.252.172:59029/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736593986, "uuid": "081326e7-d00d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.154.201:49627/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736594346, "uuid": "df0353e3-d00d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.24.207:48894/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736594416, "uuid": "08d1af75-d00e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.119.155.9:51410/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736594526, "uuid": "4a56d796-d00e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.31.246.124:57989/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736594646, "uuid": "91cb38fd-d00e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.243.93:54351/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736594706, "uuid": "b59cd579-d00e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.225.217:46056/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736594827, "uuid": "fd8f7542-d00e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.238.75.232:55570/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736595011, "uuid": "6b54df04-d00f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.153.31:46249/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736595012, "uuid": "6bd340e9-d00f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.116.40:40718/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736595012, "uuid": "6be56159-d00f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.244.221:49038/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736595071, "uuid": "8effd128-d00f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.148.211:56783/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736595127, "uuid": "b0b0cbf0-d00f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.243.93:54351/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736595664, "uuid": "f0a0bd96-d010-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.24.207:48894/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736595964, "uuid": "a3639cf8-d011-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.215.89:40120/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736596147, "uuid": "1048f4e4-d012-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.88.240:57357/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736596267, "uuid": "57b62055-d012-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.139.44:1758/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736596871, "uuid": "bfb05398-d013-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.81.47:34287/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736596926, "uuid": "e0f0c084-d013-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.114.105:38512/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736596985, "uuid": "03f3a503-d014-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.178.142:11861/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736596985, "uuid": "04075859-d014-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.178.95:11212/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736596986, "uuid": "0482a520-d014-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.178.48:10114/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736596987, "uuid": "0561d9a8-d014-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.22.186:40485/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736596988, "uuid": "057cf511-d014-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.27.199.101:48965/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736596988, "uuid": "05cd12f2-d014-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.253.100:35872/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736596988, "uuid": "05d6d9c9-d014-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.29.73:53792/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736596988, "uuid": "05d7c65a-d014-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.84.74:42528/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736596989, "uuid": "05fcc75d-d014-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.2.44:49420/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736596989, "uuid": "061547e6-d014-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.4.224:47549/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736596991, "uuid": "078b4cc3-d014-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.199.202.113:47645/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736596993, "uuid": "08cdc1cb-d014-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.15.252.177:51678/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736596997, "uuid": "0adc8df8-d014-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.60.35.157:52772/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736597006, "uuid": "1021ce33-d014-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.5.156:40152/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736597015, "uuid": "15b6e884-d014-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.115.242.41:49210/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736597015, "uuid": "15e61ab4-d014-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.32.235.65:42309/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736597015, "uuid": "15e62734-d014-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.168.120.200:59294/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736597017, "uuid": "17406738-d014-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.5.0.95:39190/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736597074, "uuid": "38fe713c-d014-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.68.95:38685/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736597287, "uuid": "b79d2bfc-d014-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.116.40:40718/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736597288, "uuid": "b8a6e7d9-d014-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.8.214.78:53694/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736597348, "uuid": "dc00281a-d014-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.7.80:39387/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736597647, "uuid": "8e624c3d-d015-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.168.187:40688/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736597768, "uuid": "d657a928-d015-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.114.32.207:20817/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736597886, "uuid": "1d1088a6-d016-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.180.65:51773/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736597886, "uuid": "1d33bbae-d016-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.55.38:50263/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736598080, "uuid": "90b7657e-d016-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.61.161:53064/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736598186, "uuid": "cfe90e8f-d016-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.143.183:46882/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736598321, "uuid": "2076f7e4-d017-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.253.119:54671/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736598486, "uuid": "82c7ee8f-d017-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.81.47:34287/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736598789, "uuid": "3730b465-d018-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.7.80:39387/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736598966, "uuid": "a07f0a11-d018-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.114.105:38512/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736599626, "uuid": "2a085ae3-d01a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.61.161:53064/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736600227, "uuid": "904e5779-d01b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.229.227:57284/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736600469, "uuid": "203d1419-d01c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.202.244:56204/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736600470, "uuid": "211e5211-d01c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.202.169:36900/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736600895, "uuid": "1e6976be-d01d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.74.6.14:47050/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601010, "uuid": "62f1fd62-d01d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.117.110:50947/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601127, "uuid": "a8956f90-d01d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.225.175:57514/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601186, "uuid": "cc260b64-d01d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.225.238.202:56058/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601365, "uuid": "36c07929-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.197.181:54660/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601485, "uuid": "7ded4dcb-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.124/main_arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601485, "uuid": "7e0934c4-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.35.94/bins/Vt680wNr3VWeiVybeA6aVcRbfM1fSdAsv9", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601485, "uuid": "7e0de481-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.225/bins/xuyDBZCeqouxETK0ngKX8OomiOvRSLh8Gj", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601485, "uuid": "7e0dfee3-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.225/bins/tIJZaugENbM7yOdCx9ev3hdQ8gFI7Cfid8", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601485, "uuid": "7e10b55a-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.35.94/bins/4IIndZS0xEQu7NsATM2HxWYPnmH5Hdyiw5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601485, "uuid": "7e3202f7-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.35.94/bins/nferBspLrFAVgiNorKu57smZwojv39zQZJ", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601485, "uuid": "7e32e3af-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.225/bins/9BuNDI2WLiZ8szfGijoGgOxJhjoT3gbLDM", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601485, "uuid": "7e4d114e-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.38.42.17/1736492821_45dc852f564006b529966a1149e98bde/firmware.safe.armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601485, "uuid": "7e4e850c-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.35.94/bins/bjOSqrhe6R40IaccStuCvDlennuaog0zGQ", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601485, "uuid": "7e4eefdb-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.38.42.17/1736492821_45dc852f564006b529966a1149e98bde/firmware.safe.armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601486, "uuid": "7e75e8c1-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.225/bins/rYCfC0Phw3lyZY0tAtEIEzUZxYG0ebWGrM", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601486, "uuid": "7e761ca6-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.225/bins/ccFxObWuyFoOtaIkSaM3ck1dwAg9EhozWv", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601486, "uuid": "7e82a394-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.38.42.17/1736492821_45dc852f564006b529966a1149e98bde/firmware.safe.mips.dbg", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601487, "uuid": "7f010a14-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.225/bins/1YpENGO0uwXdtNlcIvtdZpvCnzZZ4RGcJM", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601487, "uuid": "7f5e1477-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.124/main_x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601487, "uuid": "7f5e39cf-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.38.42.17/1736492821_45dc852f564006b529966a1149e98bde/firmware.safe.armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601487, "uuid": "7f6bb080-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.124/main_mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601487, "uuid": "7f78d7a9-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.225/bins/fvSGO4J1g2K5YlZj6wrh60QcWuH72EmKRO", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601487, "uuid": "7f81af1a-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.124/main_x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601488, "uuid": "7fa2c7db-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.124/main_m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601488, "uuid": "7fa532d5-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.225/bins/XunuGZH9CRlJWnwvVOWiDby46lGiNB4I4Q", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601488, "uuid": "7fa7fa75-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.35.94/bins/3BtJiw44ciPVvIR82RWwvnb8KHcOjSGT1c", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601488, "uuid": "7fe27ee9-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.35.94/bins/LX3QwteHSdu7VD9NycUg4llgPfqxE2Yqtl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601489, "uuid": "80412fd3-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.225/bins/HDkv6fqHWmZ5O7OHB27jb3od0MFcvJ3xKl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601489, "uuid": "80544e92-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.38.42.17/1736492821_45dc852f564006b529966a1149e98bde/firmware.safe.mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601489, "uuid": "8081dabc-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.225/bins/EIRh6m0Bj0STj57Cq7OQBEIdHylY5xL3m8", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601489, "uuid": "808a6e96-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.124/main_sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601489, "uuid": "808d5815-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.225/bins/Z3olvxlFkdi8JAy07zd9X0NL6UihtIvBCl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601490, "uuid": "80de9b04-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.38.42.17/1736492821_45dc852f564006b529966a1149e98bde/firmware.safe.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601490, "uuid": "80dfccbd-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.225/bins/cGztAx60my1B8kvzbs3dcsHOUFQznGfp7P", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601490, "uuid": "80f73f94-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.163.215.73/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601490, "uuid": "8129ebef-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.59/nrarm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601490, "uuid": "813b2209-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.163.215.73/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601490, "uuid": "815c8111-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.163.215.73/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601490, "uuid": "815caa98-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.38.42.17/1736492821_45dc852f564006b529966a1149e98bde/firmware.safe.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601490, "uuid": "815efa94-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.163.215.73/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601491, "uuid": "818f51f2-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.35.94/bins/nuTegSqakf77gn9MyScX5Z7fJZkgCOB3f6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601491, "uuid": "819db7f2-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.163.215.73/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601491, "uuid": "81aa65b8-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.124/main_ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601491, "uuid": "81c010cc-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.225/bins/apByy2f6bMlc1HZr5RP2TiVoAuQMHeJfyw", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601491, "uuid": "81d809a1-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.163.215.73/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601491, "uuid": "81ec74fb-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.225/bins/kU64hPj7A3hTSg4HXbjmjoyMIruZeJzDZg", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601492, "uuid": "82321b9c-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.173.202.137/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601492, "uuid": "823341b8-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.38.42.17/1736492821_45dc852f564006b529966a1149e98bde/firmware.safe.armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601492, "uuid": "82340752-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.146.110/tppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601492, "uuid": "8237cf05-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.173.202.137/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601492, "uuid": "82388494-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.173.202.137/i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601492, "uuid": "8238bc2c-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.173.202.137/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601492, "uuid": "8243ac04-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.173.202.137/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601492, "uuid": "82443ed3-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.173.202.137/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601492, "uuid": "8245ae92-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.146.110/tspc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601492, "uuid": "8245dca0-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.146.110/tmips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601492, "uuid": "8246ef54-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.146.110/tsh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601492, "uuid": "8253b346-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.146.110/tarm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601492, "uuid": "825ec5c6-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.213.187.118/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601493, "uuid": "829cfcb4-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.213.187.118/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601493, "uuid": "82de362d-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.146.110/tmpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601493, "uuid": "82dfed13-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.169.124/main_mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601493, "uuid": "82e31936-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.163.215.73/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601493, "uuid": "82e3e9c2-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.213.187.118/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601494, "uuid": "836a7749-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.213.187.118/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601494, "uuid": "837bb310-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.163.215.73/i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601495, "uuid": "83ca245c-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.213.187.118/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601495, "uuid": "83d1ce54-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.213.187.118/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601495, "uuid": "83d55b04-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.213.187.118/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601495, "uuid": "83d75781-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.59/nrarm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601495, "uuid": "83e3e091-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.146.110/tarm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601495, "uuid": "83eec9ac-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.59/nrmpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601495, "uuid": "84044392-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.173.202.137/aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601495, "uuid": "8409da7d-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.213.187.118/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601495, "uuid": "84286c1e-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.163.215.73/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601495, "uuid": "842999a2-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.173.202.137/sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601515, "uuid": "8fbeed1d-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.115/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601515, "uuid": "8fd1c03d-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.115/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601515, "uuid": "8fdf2569-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.115/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601515, "uuid": "8fe2495c-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.115/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601515, "uuid": "8fe2fa85-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.115/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601517, "uuid": "91133a15-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.115/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601517, "uuid": "915afc28-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.115/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601518, "uuid": "91865209-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.115/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601519, "uuid": "9237e3c3-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.115/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601520, "uuid": "92fbcc31-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.115/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601521, "uuid": "93bcc813-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.115/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601521, "uuid": "93cf85c7-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.115/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601523, "uuid": "94c6fd07-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.115/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601546, "uuid": "a28146ca-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.59/nrarm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601546, "uuid": "a2aa13d8-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.213.187.118/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601546, "uuid": "a2af8f7c-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.213.187.118/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601546, "uuid": "a2b94a71-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.213.187.118/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601546, "uuid": "a2b97cd1-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.146.110/tarm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601548, "uuid": "a3eb28ab-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.231.1:42599/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601614, "uuid": "caf752b9-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.222.191.91:8080/x.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601614, "uuid": "cb20aec6-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.229.227:57284/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601614, "uuid": "cb307e49-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.222.191.91/oops/Kloki.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601614, "uuid": "cb30fa20-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.222.191.91/oops/Kloki.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601614, "uuid": "cb3151d6-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.222.191.91/oops/Kloki.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601614, "uuid": "cb43cc6d-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.222.191.91/oops/Kloki.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601614, "uuid": "cb43d180-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.222.191.91:8080/oops/Kloki.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601614, "uuid": "cb447fb0-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.222.191.91/oops/Kloki.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601615, "uuid": "cb588975-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.222.191.91:8080/oops/Kloki.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601615, "uuid": "cb5e7981-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.222.191.91:8080/oops/Kloki.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601615, "uuid": "cb5eea7a-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.222.191.91:8080/oops/Kloki.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601615, "uuid": "cb5ef74a-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.222.191.91/oops/Kloki.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601615, "uuid": "cb5f062f-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.222.191.91/oops/Kloki.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601615, "uuid": "cb5f3081-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.222.191.91:8080/oops/Kloki.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601615, "uuid": "cb5f4a45-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.222.191.91:8080/oops/Kloki.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601615, "uuid": "cb5f6bda-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.222.191.91/oops/Kloki.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601615, "uuid": "cb5f7167-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.222.191.91:8080/oops/Kloki.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601615, "uuid": "cb634ccf-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.222.191.91:8080/oops/Kloki.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601615, "uuid": "cb6380b1-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.222.191.91/oops/Kloki.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601615, "uuid": "cb6c3103-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.222.191.91/oops/Kloki.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601615, "uuid": "cb6c381b-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.222.191.91:8080/oops/Kloki.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601615, "uuid": "cb6c9778-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.222.191.91:8080/oops/Kloki.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601615, "uuid": "cb7519b8-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.222.191.91:8080/oops/Kloki.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601615, "uuid": "cb75494b-d01e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.222.191.91/oops/Kloki.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736601968, "uuid": "9e3972d0-d01f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.170.193:38517/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736602085, "uuid": "e3d6a18e-d01f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.217.187.3:47595/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736602146, "uuid": "0850a839-d020-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.230.0:51575/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736602276, "uuid": "557e5181-d020-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.74.6.14:47050/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736602449, "uuid": "bc8edaca-d020-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.120.234:37852/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736602867, "uuid": "b5ede5cd-d021-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.139.22:51089/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736602926, "uuid": "d9174ef6-d021-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.222.33.71:40708/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736602927, "uuid": "d9798809-d021-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.14.238:50977/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603165, "uuid": "6790b621-d022-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.23.103.58/Documents/Invoice5285972.lnk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603165, "uuid": "6792d084-d022-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.23.103.58/Documents/4500005767-INVOICE.pdf.lnk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603165, "uuid": "67935d75-d022-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://solve.bogx.org/awjsx.captcha", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603166, "uuid": "68566e12-d022-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.209.82:52731/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603285, "uuid": "af453209-d022-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.59/t", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603286, "uuid": "af4b5dc5-d022-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.59/busybox-mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603345, "uuid": "d2f141ac-d022-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.173.202.137/test", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603410, "uuid": "f98f818a-d022-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.35.94/bins/spim", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603410, "uuid": "f98f999c-d022-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.35.94/bins/lespim", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603412, "uuid": "faa76d19-d022-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.35.94/.shell", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603412, "uuid": "faa9e92f-d022-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.35.94/bins/k86m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603412, "uuid": "fab3c6e9-d022-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.35.94/bins/686i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603412, "uuid": "fab65ad5-d022-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.146.110/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603412, "uuid": "fae9b2c8-d022-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.146.110/dh.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603412, "uuid": "faee0374-d022-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.173.87.233:45101/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603412, "uuid": "faeea2fa-d022-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.146.110/dh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603412, "uuid": "faf262af-d022-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.146.110/dhh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603413, "uuid": "fb20f61f-d022-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.35.94/scan.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603414, "uuid": "fbdc9fe2-d022-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.35.94/masjesuscan", "Tag": [ { "name": "bruteforce", "colour": "#de303d", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603464, "uuid": "19f1f8e1-d023-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.146.110/tx86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603465, "uuid": "1a132b96-d023-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.95.146.110/tm68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603527, "uuid": "3f03548c-d023-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.230.0:51575/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603585, "uuid": "61c85378-d023-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.163.215.73/dlr.mpsl", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "hex", "colour": "#cde6b5", "exportable": true, "hide_tag": false }, { "name": "hex-loader", "colour": "#8a18e3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603585, "uuid": "61caeec9-d023-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.163.215.73/dlr.arm", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "hex", "colour": "#cde6b5", "exportable": true, "hide_tag": false }, { "name": "hex-loader", "colour": "#8a18e3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603585, "uuid": "61cb7b59-d023-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.163.215.73/dlr.m68k", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "hex", "colour": "#cde6b5", "exportable": true, "hide_tag": false }, { "name": "hex-loader", "colour": "#8a18e3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603585, "uuid": "61cd554a-d023-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.163.215.73/dlr.arm5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "hex", "colour": "#cde6b5", "exportable": true, "hide_tag": false }, { "name": "hex-loader", "colour": "#8a18e3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603585, "uuid": "61cdc575-d023-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.163.215.73/dlr.mips", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "hex", "colour": "#cde6b5", "exportable": true, "hide_tag": false }, { "name": "hex-loader", "colour": "#8a18e3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603585, "uuid": "61cecd81-d023-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.163.215.73/dlr.ppc", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "hex", "colour": "#cde6b5", "exportable": true, "hide_tag": false }, { "name": "hex-loader", "colour": "#8a18e3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603585, "uuid": "61d08b4e-d023-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.163.215.73/dlr.arm6", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "hex", "colour": "#cde6b5", "exportable": true, "hide_tag": false }, { "name": "hex-loader", "colour": "#8a18e3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603585, "uuid": "61d0a987-d023-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.163.215.73/dlr.arm7", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "hex", "colour": "#cde6b5", "exportable": true, "hide_tag": false }, { "name": "hex-loader", "colour": "#8a18e3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603586, "uuid": "6261bd1e-d023-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.163.215.73/dlr.spc", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "hex", "colour": "#cde6b5", "exportable": true, "hide_tag": false }, { "name": "hex-loader", "colour": "#8a18e3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603586, "uuid": "62653965-d023-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.163.215.73/dlr.sh4", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "hex", "colour": "#cde6b5", "exportable": true, "hide_tag": false }, { "name": "hex-loader", "colour": "#8a18e3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603586, "uuid": "62806bf6-d023-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.163.215.73/wget.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603586, "uuid": "62851c92-d023-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.163.215.73/curl.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603646, "uuid": "860a96d5-d023-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.217.187.3:47595/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603829, "uuid": "f3273458-d023-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.208.57.163:50206/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736603921, "uuid": "29faa4a6-d024-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.119.181:42580/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736604010, "uuid": "5f463111-d024-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.114.145:41893/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736604076, "uuid": "8634bd62-d024-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.120.234:37852/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736604246, "uuid": "ebb70c93-d024-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.135.201.123:43935/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736604546, "uuid": "9e81e71e-d025-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.160.198:45440/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736604610, "uuid": "c4965696-d025-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.139.22:51089/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736604611, "uuid": "c5318aa0-d025-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.116.71.220:60615/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736604668, "uuid": "e7484ecb-d025-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.173.87.233:45101/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736605115, "uuid": "f1954b68-d026-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.239.184:46702/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736605145, "uuid": "0379c7cb-d027-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.36.148.87:38124/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736605507, "uuid": "db94dbcf-d027-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.135.201.123:43935/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736605627, "uuid": "22cf5fcc-d028-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.182.43:58448/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736606047, "uuid": "1d8610fc-d029-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.119.181:42580/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736606467, "uuid": "176ac155-d02a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.57.152:55700/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736606588, "uuid": "5f70a317-d02a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.42.150:50954/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736606706, "uuid": "a63e3035-d02a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.36.148.87:38124/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736606708, "uuid": "a6f4ba54-d02a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.239.184:46702/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736607066, "uuid": "7cd0b861-d02b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.182.43:58448/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736607067, "uuid": "7d4dbb1b-d02b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.26.86:59900/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736607547, "uuid": "9b941927-d02c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.235.250:38253/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736607610, "uuid": "c0a3bbb9-d02c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.236.214:39640/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736607726, "uuid": "06330f89-d02d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.57.152:55700/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626684, "uuid": "29c30505-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.176.72:40412/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626684, "uuid": "29cd891d-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.49.65.96:54649/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626684, "uuid": "2a120aaf-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.178.157:10628/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626685, "uuid": "2a4d0609-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.178.74:10130/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626685, "uuid": "2a9e8f3a-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://candwfarmsllc.com/c2.bat", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626685, "uuid": "2aa2b9af-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://codeberg.org/wwxx/wwxx/src/branch/main/wzeygpxfpk.png", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626690, "uuid": "2d590197-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.197.113.145:39749/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626690, "uuid": "2d950776-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.31.69:38742/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626691, "uuid": "2df701d2-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.8.196.9:52868/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626691, "uuid": "2dfb1798-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.41.244.11/files/ts1388/random.exe", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626691, "uuid": "2e0492dd-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.221.104:54012/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626691, "uuid": "2e04b789-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.85.169:33607/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626691, "uuid": "2e0e6fc4-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.26.29:50576/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626691, "uuid": "2e2e97d0-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.10.150:59292/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626692, "uuid": "2e65bae3-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.41.244.11/files/kitty/random.exe", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626692, "uuid": "2eaeff83-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.93.20.67/hdont.exe", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626692, "uuid": "2ee9656e-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.93.20.67/markiz.exe", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626693, "uuid": "2efaf8cb-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.93.20.67/kanew.exe", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626694, "uuid": "3021774d-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.93.20.67/elm.exe", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626696, "uuid": "313b25ce-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.93.20.67/utkin.exe", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626698, "uuid": "3250a96e-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.111.75.24:49944/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626699, "uuid": "32b2b2eb-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.111.75.96:39157/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626699, "uuid": "32cc99fb-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://codeberg.org/wwxx/wwxx/raw/branch/main/@bebanrti%20(1).exe", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626699, "uuid": "32e59583-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.41.244.11/files/martin1/random.exe", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626700, "uuid": "33a205ca-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://codeberg.org/wwxx/wwxx/raw/branch/main/qebhojsmda.png", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626703, "uuid": "3548a3f3-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.240.28:38171/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626705, "uuid": "368910c8-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.30.184:44191/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626706, "uuid": "36bab68e-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://codeberg.org/wwxx/wwxx/raw/branch/main/The%20Foundry.exe", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626706, "uuid": "3713c6d2-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.41.244.11/files/GoodTimes306/random.exe", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626708, "uuid": "37ee1ccf-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.208.230.199:44490/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626708, "uuid": "37ee1db1-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.41.244.11/files/BoZar45/random.exe", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626708, "uuid": "38524b9e-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.65.61:55919/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626709, "uuid": "389b0d3c-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.200.29:57619/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626713, "uuid": "3b651954-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.61.154:45312/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626714, "uuid": "3b88e6c3-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.72.84:32907/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626714, "uuid": "3b939d61-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.248.15.26:41471/Mozi.m", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626714, "uuid": "3b95af74-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.44.166:45166/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626714, "uuid": "3b9e8f4f-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.190.107:53983/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626714, "uuid": "3bbe1a1d-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.13.85.22:41479/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626714, "uuid": "3bd076b4-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.57.58:36478/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626714, "uuid": "3be5239e-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.41.18:59563/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626714, "uuid": "3bf2969a-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.51.12.11:50493/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626714, "uuid": "3bf80d25-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.109.107:35099/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626717, "uuid": "3d485731-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.36.0.116:46544/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626717, "uuid": "3da5ae6a-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.230.57.120:39638/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626718, "uuid": "3de67be4-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.250.245:46494/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626721, "uuid": "40327403-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.4.9:49001/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626729, "uuid": "448cf562-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.63.153:37084/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626731, "uuid": "45b4389f-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.7.20:57470/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626751, "uuid": "51cc8341-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.65.105:51583/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626751, "uuid": "51f15440-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.249.246:43612/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626751, "uuid": "51f50f03-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.4.140:56256/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626751, "uuid": "520053d0-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.151.224:36486/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626751, "uuid": "520300f5-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.75.171:45567/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626751, "uuid": "52163d76-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.70.251:39027/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626751, "uuid": "5217784a-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.154.13:54530/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626751, "uuid": "52193fbf-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.90.8:40431/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626751, "uuid": "521bdc7b-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.148.211:56783/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626752, "uuid": "522056c0-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.70.251:39027/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626752, "uuid": "5223861e-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.79.207:58276/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626752, "uuid": "5237685c-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.68.142.178:33531/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626752, "uuid": "5237c4c7-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.245.60.22:48456/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626752, "uuid": "525269ae-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.11.56.126:54100/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626752, "uuid": "525a0218-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.236.118:33763/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626752, "uuid": "525d5ebf-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.76.17:36376/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626752, "uuid": "525e1e58-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://197.207.98.130:46484/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626752, "uuid": "525e982d-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.45.156:47122/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626752, "uuid": "52602d6c-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.17.144:33289/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626752, "uuid": "5267011f-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.124.127:49003/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626752, "uuid": "52670a03-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.5.98:50698/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626752, "uuid": "526a519d-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.251.236:36770/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626752, "uuid": "526b0b9b-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.39.167:45044/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626752, "uuid": "527e09b8-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.185.159:56922/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626752, "uuid": "527f62fd-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.212.140:59405/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626752, "uuid": "5281dec6-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.175.71.53:60923/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626752, "uuid": "528220e1-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.198.71:39766/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626752, "uuid": "5282b9a1-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.5.98:50698/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626752, "uuid": "5293a668-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.11.233:51119/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626752, "uuid": "529d7742-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.235.174:45389/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626752, "uuid": "52a3166b-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.175.71.53:60923/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626752, "uuid": "52a31c99-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.26.8:36823/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626753, "uuid": "52cb4da7-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.138.159:33709/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626755, "uuid": "543dfd2e-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.251.72:55815/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626757, "uuid": "55761049-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.154.201:49627/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626757, "uuid": "557cd522-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.59.110:36988/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626757, "uuid": "559bbb83-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.190.39:42279/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626757, "uuid": "559cebb5-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.236.214:39640/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626758, "uuid": "55bcc5f0-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.15.93:40514/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626758, "uuid": "55cd7d68-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.76.17:36376/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626758, "uuid": "55d0ff7b-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.11.56.126:54100/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626758, "uuid": "55d3689b-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.185.176:60336/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626758, "uuid": "55d74ef6-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.198.71:39766/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626758, "uuid": "55e0dc32-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.26.8:36823/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626758, "uuid": "55e1fba3-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.177.24:49465/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626758, "uuid": "55f0b778-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.251.236:36770/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626758, "uuid": "55f0e5fe-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.148.163:33088/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626758, "uuid": "55f37458-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.220.56:51978/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626758, "uuid": "55f3d7e9-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.73.102:37028/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626758, "uuid": "55f3de22-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.42.150:50954/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626758, "uuid": "560d53bd-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.170.127:54130/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626758, "uuid": "560efefb-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.75.35:33762/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626758, "uuid": "56112101-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.72.128:35353/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626758, "uuid": "5612d3ad-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.101.39:58158/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626758, "uuid": "56212296-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.9.41.35:58696/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626758, "uuid": "5639d45f-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.9.41.35:58696/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626759, "uuid": "56545a31-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.240.129:56169/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626759, "uuid": "567de383-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.49.65:42111/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626759, "uuid": "568f95b9-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.211.47.72:36621/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626759, "uuid": "5698db05-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.117.25:53422/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626762, "uuid": "58520271-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.196.47:41805/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626762, "uuid": "585c87c4-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.185.159:56922/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626762, "uuid": "587d29b8-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.80.118:48739/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626762, "uuid": "5880b9bc-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.80.118:48739/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626762, "uuid": "588bc257-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.235.174:45389/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626763, "uuid": "58acc366-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.225.175:57514/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626763, "uuid": "58ae3c0d-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.247.170:36365/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626763, "uuid": "58b4aadb-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.151.224:36486/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626763, "uuid": "58b60f15-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.4.140:56256/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626763, "uuid": "58bc9482-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.15.93:40514/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626763, "uuid": "58be1ce6-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.11.233:51119/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626763, "uuid": "58c2e7f1-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.39.167:45044/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626763, "uuid": "58c78749-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.59.138:46982/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626763, "uuid": "58cba0f3-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://207.188.92.211:33637/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626763, "uuid": "58db560a-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.247.154.163:44712/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626763, "uuid": "58e54d52-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.8.170:49585/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626763, "uuid": "58e54e4a-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.49.65:42111/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626763, "uuid": "58f5f8f8-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.65.105:51583/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626763, "uuid": "58fc38d6-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.14.238:50977/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626763, "uuid": "59268f2a-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.89.80:42943/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626763, "uuid": "592f03be-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.247.154.163:44712/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626763, "uuid": "5932e669-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.79.26:48947/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626763, "uuid": "593d078a-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.251.139:48458/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626764, "uuid": "59952503-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://207.188.92.211:33637/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626765, "uuid": "59f43217-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.4.191:52498/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626769, "uuid": "5c5c91e7-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.150.148:50831/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626770, "uuid": "5d209928-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.54.202:54073/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626775, "uuid": "604dd9d9-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.107.152:32812/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626777, "uuid": "6179f87a-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.60.233.72:50010/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626783, "uuid": "652c92a4-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.63.106.137:60986/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626795, "uuid": "6c322879-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.91.36:34196/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736626866, "uuid": "961181e2-d059-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.247.170:36365/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736627225, "uuid": "6c7f07f9-d05a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.212.140:59405/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736627226, "uuid": "6ced54e8-d05a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.160.54:43153/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736627285, "uuid": "902008f4-d05a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.240.129:56169/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736627409, "uuid": "da336c03-d05a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://197.207.98.130:46484/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736627647, "uuid": "67b95a0e-d05b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.67.223:33550/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736627647, "uuid": "67c2c5d7-d05b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.10.52.27:36572/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736627945, "uuid": "197ad881-d05c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.1.48:34833/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736628007, "uuid": "3ea4660f-d05c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.245.11:37300/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736628125, "uuid": "84fd5fbe-d05c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.37.19:33527/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736628306, "uuid": "f0a2448c-d05c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.250/zcry/script.ps1", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736628306, "uuid": "f0aa74d8-d05c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://66.63.187.250/zcry/script.ps1", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736628309, "uuid": "f23aeb16-d05c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.250/zcry/gem2.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736628309, "uuid": "f240ca38-d05c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.160.54:43153/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736628309, "uuid": "f24d51ea-d05c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://66.63.187.250/zcry/gem2.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736628309, "uuid": "f2725f4d-d05c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.250/zcry/gem1.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736628309, "uuid": "f29e02e7-d05c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://66.63.187.250/zcry/gem1.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736628367, "uuid": "14de96ad-d05d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.10.52.27:36572/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736628426, "uuid": "381ea9cb-d05d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.197.111:54328/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736628486, "uuid": "5c0feda5-d05d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.90.238:10750/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736628546, "uuid": "7fa934ab-d05d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://kasihcommunityschool.sch.id/zcry/script.ps1", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736628547, "uuid": "802d0909-d05d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://kasihcommunityschool.sch.id/zcry/script.ps1", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736628548, "uuid": "80ae3b82-d05d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.simon.sttdiakonos.ac.id/zcry/script.ps1", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736628548, "uuid": "80da9954-d05d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://mail.simon.sttdiakonos.ac.id/zcry/script.ps1", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736628549, "uuid": "81409f96-d05d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://kasihcommunityschool.sch.id/zcry/gem1.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736628549, "uuid": "8140a41f-d05d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://kasihcommunityschool.sch.id/zcry/gem2.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736628549, "uuid": "8140b4b3-d05d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://kasihcommunityschool.sch.id/zcry/gem1.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736628549, "uuid": "8140bbda-d05d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://kasihcommunityschool.sch.id/zcry/gem2.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736628550, "uuid": "81eb5e94-d05d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://mail.simon.sttdiakonos.ac.id/zcry/gem1.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736628551, "uuid": "826aeb82-d05d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.simon.sttdiakonos.ac.id/zcry/gem2.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736628551, "uuid": "827f143f-d05d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://mail.simon.sttdiakonos.ac.id/zcry/gem2.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736628551, "uuid": "82dc91bd-d05d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.simon.sttdiakonos.ac.id/zcry/gem1.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736628607, "uuid": "a40a923a-d05d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.115.111:58831/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736628728, "uuid": "ec69b0bf-d05d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.27.222:50116/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736628908, "uuid": "57379da6-d05e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.112.239:48177/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736629086, "uuid": "c1a9ea1d-d05e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.67.223:33550/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736629086, "uuid": "c1af09cd-d05e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.75.35:33762/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736629266, "uuid": "2cdd481f-d05f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.138.159:33709/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736629385, "uuid": "740f9561-d05f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.133.73:39589/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736629387, "uuid": "74f523aa-d05f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.75.35:33762/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736629388, "uuid": "7559bc88-d05f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.165.55:38895/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736629389, "uuid": "75fb24df-d05f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.10.193:58876/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736629404, "uuid": "7f522fdc-d05f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.6.131:47917/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736629415, "uuid": "857b067d-d05f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.0.170:52785/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736629415, "uuid": "857ba94a-d05f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.224.187.107:50273/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736629415, "uuid": "85e49e3c-d05f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.115.122.57:56150/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736629686, "uuid": "27032c40-d060-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.1.48:34833/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736629987, "uuid": "da6d7fc2-d060-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.221.73.10:38160/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736630286, "uuid": "8d09004b-d061-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.161.189:59469/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736630347, "uuid": "b141cba9-d061-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.252.71:32999/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736630409, "uuid": "d606e2c9-d061-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.12.70:60791/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736630766, "uuid": "aad87d61-d062-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.64.174:34065/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736630766, "uuid": "ab1557a2-d062-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.140.127:48391/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736630826, "uuid": "ceedec80-d062-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.218.122.0:50629/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736631487, "uuid": "5893afa5-d064-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.6.251:50444/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736631608, "uuid": "a0d49678-d064-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.221.73.10:38160/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736631786, "uuid": "0b101390-d065-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.252.71:32999/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736631908, "uuid": "53add8c4-d065-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.161.189:59469/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736631908, "uuid": "53e61ced-d065-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.184.97:59419/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736631909, "uuid": "53fce943-d065-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.218.122.0:50629/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736632446, "uuid": "9439e598-d066-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.94.239:36427/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736632508, "uuid": "b918856b-d066-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.138.103:50884/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736632508, "uuid": "b951569e-d066-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.183.9:41907/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736632566, "uuid": "dbc5af28-d066-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.23.157.207:45530/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736632686, "uuid": "23367744-d067-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.64.174:34065/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736632746, "uuid": "46f17b6b-d067-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.105.82:33386/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736632866, "uuid": "8e9ae15b-d067-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.157.247.79/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736632866, "uuid": "8ee6df33-d067-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.157.247.79/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736632866, "uuid": "8ee6ee38-d067-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.157.247.79/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736632868, "uuid": "8fbd7efb-d067-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.93.186:40604/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736632890, "uuid": "9ce7dd8f-d067-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.63.166:51740/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736632925, "uuid": "b1911b34-d067-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.157.247.79/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736632985, "uuid": "d5dbbb8b-d067-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.157.247.79/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736632986, "uuid": "d5e20718-d067-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.157.247.79/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736633046, "uuid": "f9e7c16f-d067-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.157.247.79/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736633166, "uuid": "412968bd-d068-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.221.104:54012/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736633287, "uuid": "895b4a8a-d068-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.171.253:55483/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736633465, "uuid": "f3e1300b-d068-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.240.234.138:52672/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736633544, "uuid": "22e508a1-d069-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.110.43:56262/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736633767, "uuid": "a7675382-d069-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.23.157.207:45530/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736633767, "uuid": "a77d900e-d069-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.138.103:50884/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736633780, "uuid": "af362bcc-d069-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.52.83:52851/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736633826, "uuid": "caf632b0-d069-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.135.30:41611/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736634125, "uuid": "7d2b29e2-d06a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.90.91:54958/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736634310, "uuid": "eb708d4d-d06a-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.63.166:51740/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736634383, "uuid": "1695611a-d06b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.200.215:45676/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736634425, "uuid": "2fe9e831-d06b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.5.111:49234/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736634546, "uuid": "780245d9-d06b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.110.43:56262/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736634669, "uuid": "c18e78a3-d06b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.98.254:57752/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736634670, "uuid": "c19c1ace-d06b-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.135.30:41611/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736634863, "uuid": "34d66034-d06c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.200.215:45676/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635085, "uuid": "b95e4652-d06c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.239.234:33370/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635086, "uuid": "b9a364f1-d06c-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.93.139.175:58268/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635209, "uuid": "032d4b38-d06d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.117.23.69/bins.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635209, "uuid": "032dc88b-d06d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.117.23.69/yakuza.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635209, "uuid": "032dcf63-d06d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.117.23.69/yakuza.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635209, "uuid": "032de00d-d06d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.117.23.69/yakuza.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635209, "uuid": "032deb5d-d06d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.117.23.69/yakuza.x32", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635209, "uuid": "0333c88e-d06d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.117.23.69/yakuza.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635209, "uuid": "033df000-d06d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.117.23.69/yakuza.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635209, "uuid": "033df147-d06d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.117.23.69/yakuza.i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635209, "uuid": "033e14e8-d06d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.117.23.69/yakuza.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635209, "uuid": "033e23cb-d06d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.117.23.69/yakuza.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635209, "uuid": "033e2a85-d06d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.117.23.69/yakuza.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635264, "uuid": "24230316-d06d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://g.gsm2.net/x/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635266, "uuid": "25303606-d06d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.121.220:39451/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635267, "uuid": "25da8b21-d06d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.41.88:42103/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635295, "uuid": "364ff918-d06d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.33.199:41065/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635325, "uuid": "485c8b62-d06d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.245.131.205:48016/Mozi.m", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635327, "uuid": "493d82a0-d06d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.181.159.16/bins/camp.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635327, "uuid": "494334e1-d06d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.181.159.16/bins/camp.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635327, "uuid": "4948df2f-d06d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.181.159.16/bins/camp.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635327, "uuid": "494a33fd-d06d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.181.159.16/bins/camp.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635327, "uuid": "494c6d9e-d06d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.181.159.16/bins/camp.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635327, "uuid": "494d7492-d06d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.181.159.16/bins/camp.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635327, "uuid": "494f3487-d06d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.181.159.16/bins/camp.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635327, "uuid": "495561a3-d06d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.181.159.16/bins/camp.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635385, "uuid": "6c4a60b1-d06d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.181.159.16/bins/camp.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635385, "uuid": "6c4d40a0-d06d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.181.159.16/bins/camp.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635385, "uuid": "6c4d4e33-d06d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.181.159.16/bins/camp.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635385, "uuid": "6c4d6f32-d06d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.181.159.16/bins/camp.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635385, "uuid": "6c4f4b81-d06d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.181.159.16/bins/camp.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635385, "uuid": "6c5b5004-d06d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.181.159.16/bins/camp.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635386, "uuid": "6cf696a8-d06d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.27.28.52:55758/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635446, "uuid": "9028941e-d06d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.171.253:55483/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635508, "uuid": "b59870fb-d06d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.234.80:60447/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635626, "uuid": "fbf7339e-d06d-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.93.157.113/flash-install.zip", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736635686, "uuid": "1f3c06ed-d06e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.90.91:54958/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736636046, "uuid": "f5d6481b-d06e-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.45.81:56195/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736636166, "uuid": "3d71cd4a-d06f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.223.92:55879/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736636226, "uuid": "619c1b1e-d06f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.242.235:49409/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736636465, "uuid": "efcb96a9-d06f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.181.3.170:8080/Document.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "webdav", "colour": "#65d452", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736636466, "uuid": "f04d8db3-d06f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.219.191:44644/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736636466, "uuid": "f07da80e-d06f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.191.38:44391/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736636467, "uuid": "f0c5bdc5-d06f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://autoparts-online.us:8080/Document.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "webdav", "colour": "#65d452", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736636467, "uuid": "f0dab3c6-d06f-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://mon-lo.online:8080/Document.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "webdav", "colour": "#65d452", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736636808, "uuid": "bc75dc1e-d070-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.192.141:46218/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736636826, "uuid": "c70f1ffb-d070-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.dropbox.com/scl/fi/f5y9c0vvgzijet8gurpaq/setup.msi?rlkey=rkwonpngwjz1ow6a0i1z42zhe&st=mjpzppqv&dl=1", "Tag": [ { "name": "Dropbox", "colour": "#2d7e21", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736636946, "uuid": "0e416e11-d071-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.219.191:44644/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637246, "uuid": "c12f6b70-d071-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.45.81:56195/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637246, "uuid": "c1994499-d071-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.27.28.52:55758/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637365, "uuid": "0857508f-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.178.216:42878/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637409, "uuid": "22c3ef43-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://superior-somalia-bs-leisure.trycloudflare.com/DXJS2.zip", "Tag": [ { "name": "cloudflare", "colour": "#74781d", "exportable": true, "hide_tag": false }, { "name": "python", "colour": "#25a4eb", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637423, "uuid": "2ab303b3-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://superior-somalia-bs-leisure.trycloudflare.com/bab.zip", "Tag": [ { "name": "cloudflare", "colour": "#74781d", "exportable": true, "hide_tag": false }, { "name": "python", "colour": "#25a4eb", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637423, "uuid": "2ac50126-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://superior-somalia-bs-leisure.trycloudflare.com/cam.zip", "Tag": [ { "name": "cloudflare", "colour": "#74781d", "exportable": true, "hide_tag": false }, { "name": "python", "colour": "#25a4eb", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637423, "uuid": "2ad47dd5-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://superior-somalia-bs-leisure.trycloudflare.com/DXJS.zip", "Tag": [ { "name": "cloudflare", "colour": "#74781d", "exportable": true, "hide_tag": false }, { "name": "python", "colour": "#25a4eb", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637424, "uuid": "2b914d79-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://superior-somalia-bs-leisure.trycloudflare.com/FTSP.zip", "Tag": [ { "name": "cloudflare", "colour": "#74781d", "exportable": true, "hide_tag": false }, { "name": "python", "colour": "#25a4eb", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637485, "uuid": "5004848f-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://superior-somalia-bs-leisure.trycloudflare.com/A1XVBSAOKMARTYVSA/A1XVBSAOKMARTYVSA_pdf.lnk", "Tag": [ { "name": "cloudflare", "colour": "#74781d", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637485, "uuid": "500615b8-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://superior-somalia-bs-leisure.trycloudflare.com/B1WRVSBA9JKSERAKLSA/B1WRVSBA9JKSERAKLSA_pdf.lnk", "Tag": [ { "name": "cloudflare", "colour": "#74781d", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637486, "uuid": "501efb99-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.170.193:38517/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637486, "uuid": "507b077a-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.189.183:38574/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637607, "uuid": "988ab207-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.242.235:49409/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637666, "uuid": "bb87fbe4-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://69.11.121.34:39558/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637667, "uuid": "bc8a4dd5-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.237.78.126:53395/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637668, "uuid": "bca2bfc9-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.131.137.159:5986/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637670, "uuid": "bddbfd81-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.183.154.97:61330/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637670, "uuid": "be189784-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.183.101.32:51106/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637670, "uuid": "be42638d-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.180.18.98:58173/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637670, "uuid": "be45de6b-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.86.12.70:22374/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637671, "uuid": "be5b6f2f-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://211.227.10.2:36600/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637671, "uuid": "be699df4-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.168.227.130:39163/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637671, "uuid": "be6cadc5-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.183.103.99:3260/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637671, "uuid": "be749922-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.252.167.170:45777/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637671, "uuid": "be88d9db-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.91.180.8:10000/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637671, "uuid": "be8e2c4c-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.229.191.196:46714/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637671, "uuid": "be91ee8d-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.162.189.209:30749/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637671, "uuid": "be92603a-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.102.238:10261/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637671, "uuid": "be95099a-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.117.181.82:16485/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637671, "uuid": "be98672b-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.52.26.162:24697/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637671, "uuid": "beada59e-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.189.158.140:24228/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637671, "uuid": "beb93c8e-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.175.115.84:12171/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637671, "uuid": "beba2a81-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.237.230.6:33942/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637672, "uuid": "bf0f1ae8-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.67.2.177:23958/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637674, "uuid": "c055da19-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.58.115.111:33677/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637674, "uuid": "c0577339-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.83.237:33538/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637678, "uuid": "c2972ae3-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.68.90.29:11101/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637678, "uuid": "c2ddf5c4-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.106.131:8005/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637684, "uuid": "c6468b31-d072-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.119.247:54288/i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637792, "uuid": "068f0033-d073-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.82.224:54871/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637863, "uuid": "310ba25e-d073-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.93.28:36401/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637907, "uuid": "4b4851ab-d073-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.93.186:40604/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736637966, "uuid": "6e7449b3-d073-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.71.31:39730/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736638086, "uuid": "b62e9151-d073-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.92.235:49316/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736638154, "uuid": "de7c3a33-d073-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.192.141:46218/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736638332, "uuid": "488a3f98-d074-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.89.71:33245/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736638333, "uuid": "4964048e-d074-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.14.190:60739/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736638445, "uuid": "8c415d8f-d074-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.189.183:38574/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736638687, "uuid": "1c0a2620-d075-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.180.181:51248/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736639046, "uuid": "f26ab58e-d075-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.31.153:54629/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736639347, "uuid": "a58d1dc7-d076-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.206.144:50239/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736639466, "uuid": "ecc3b88f-d076-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.166.33:42535/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736639766, "uuid": "9f6db971-d077-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.105.73:32802/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736639825, "uuid": "c2d07322-d077-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.217.39:50114/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1736639840, "uuid": "cbba4d8e-d077-11ef-856f-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.55.180:55192/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736596263, "uuid": "558ecbf5-d012-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.70.139.44", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736564944, "uuid": "6a2af0f9-cfc9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.70.163.140", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626758, "uuid": "55bf136c-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.70.8.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626684, "uuid": "29ac5fdb-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.51.12.11", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736596985, "uuid": "03a6b572-d014-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.15.252.177", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736553784, "uuid": "6e11f2e6-cfaf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.197.115.220", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736596985, "uuid": "03ab49c7-d014-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.199.202.113", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626684, "uuid": "299b5b26-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.208.230.199", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736575384, "uuid": "b8c0d065-cfe1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.208.231.115", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736575384, "uuid": "b8c030bf-cfe1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.208.231.68", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736637664, "uuid": "ba80caea-d072-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.237.78.126", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736637664, "uuid": "ba80bbcf-d072-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.91.180.8", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736556064, "uuid": "bd13e782-cfb4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.111.232.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736637664, "uuid": "ba8538dd-d072-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.58.115.111", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736582644, "uuid": "9fca7b9f-cff2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.58.153.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736596985, "uuid": "03a414a3-d014-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.60.35.157", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736637664, "uuid": "ba7ff4aa-d072-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "109.162.189.209", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736637664, "uuid": "ba8073db-d072-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.183.154.97", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736575684, "uuid": "6b7b889d-cfe2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.113.130.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736577907, "uuid": "98678f02-cfe7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.116.122.135", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736572444, "uuid": "e08304d2-cfda-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.100.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736567284, "uuid": "dce1d540-cfce-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.184.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736637664, "uuid": "ba8034de-d072-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.86.12.70", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736635083, "uuid": "b842b2ec-d06c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.93.139.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736568906, "uuid": "a36d3b0f-cfd2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.13.70", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736602924, "uuid": "d7d3e47d-d021-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.14.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736564163, "uuid": "9856f85b-cfc7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.27.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736556184, "uuid": "0464260d-cfb5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.224.174.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736579224, "uuid": "a93ace16-cfea-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.229.232.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563744, "uuid": "9eeed056-cfc6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.230.20.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736595009, "uuid": "69e73692-d00f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.244.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736594344, "uuid": "dd808b07-d00d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.237.24.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736588465, "uuid": "2d71c5c2-d000-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.237.58.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626758, "uuid": "55deac9e-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.239.247.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736560744, "uuid": "a29c8c5f-cfbf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.26.50.140", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736635384, "uuid": "6b4036cd-d06d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.27.28.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601183, "uuid": "ca5eccbd-d01d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.225.238.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736637664, "uuid": "ba8c9e4f-d072-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.226.102.238", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626758, "uuid": "55c76eec-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.226.89.80", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736579824, "uuid": "0f0b0f44-cfec-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.227.157.75", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626686, "uuid": "2b29e598-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.230.57.120", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626744, "uuid": "4dee48c0-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.11.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626744, "uuid": "4dedf810-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.26.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736573044, "uuid": "462b5121-cfdc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.31.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736627644, "uuid": "663d4339-d05b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.67.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736581984, "uuid": "16c75135-cff1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.107.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736558764, "uuid": "06a260e9-cfbb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.218.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736568844, "uuid": "7e5f8cd4-cfd2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.220.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601124, "uuid": "a6ef7b5a-d01d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.225.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736557444, "uuid": "f367dd3c-cfb7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.34.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736597884, "uuid": "1ba645ee-d016-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.55.38", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736555588, "uuid": "a18fa0d7-cfb3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.97.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736628005, "uuid": "3d352432-d05c-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.245.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736595009, "uuid": "69eb001e-d00f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.116.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736627224, "uuid": "6b8f9042-d05a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.160.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736637484, "uuid": "4f0fd065-d072-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.189.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736636463, "uuid": "eecccedb-d06f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.191.38", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626684, "uuid": "299cbbaa-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.109.107", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736595068, "uuid": "8d500c17-d00f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.148.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736573044, "uuid": "462b3d16-cfdc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.59.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736585584, "uuid": "784b67a1-cff9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.138.242.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736591763, "uuid": "db8e0843-d007-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.192.33.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736575506, "uuid": "0120781e-cfe2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.166.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736591885, "uuid": "23db2487-d008-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.199.153.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736576406, "uuid": "1a0f1668-cfe4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.199.210.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626685, "uuid": "2abef46f-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.199.30.184", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736568544, "uuid": "cb8eb230-cfd1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.235.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736569991, "uuid": "29f0f1b3-cfd5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.65.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626684, "uuid": "2a000393-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.65.61", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563324, "uuid": "a41b0dd6-cfc5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.67.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626684, "uuid": "299f33f9-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.57.58", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736574905, "uuid": "9b3791a4-cfe0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.58.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736554324, "uuid": "afba70ab-cfb0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.182.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736572384, "uuid": "bcb1db72-cfda-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.25.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736553784, "uuid": "6e129562-cfaf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.28.160", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736565365, "uuid": "64a57bdf-cfca-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.74.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736588465, "uuid": "2d71b1d9-d000-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.211.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736553784, "uuid": "6e1285d4-cfaf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.215.144", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736592484, "uuid": "89355d9d-d009-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.220.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736553784, "uuid": "6e125a85-cfaf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.114.118", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736573407, "uuid": "1e12881c-cfdd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.126.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736581384, "uuid": "b12c75c6-cfef-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.13.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563807, "uuid": "c42c2f79-cfc6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.16.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736591163, "uuid": "75ff2ef8-d006-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.17.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563264, "uuid": "80b07f34-cfc5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.22.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736583724, "uuid": "23ab6dec-cff5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.29.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736586184, "uuid": "dde0f4e9-cffa-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.32.49", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736596985, "uuid": "03a308df-d014-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.5.156", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626684, "uuid": "29a71bd6-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.7.20", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736562425, "uuid": "8c9fdb9d-cfc3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.9.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736557207, "uuid": "666326c3-cfb7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.90.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736562485, "uuid": "b01b8c7c-cfc3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.90.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626751, "uuid": "5219aee0-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.91.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736572864, "uuid": "da881a9e-cfdb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.92.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736574423, "uuid": "7bd83fa9-cfdf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.92.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736586184, "uuid": "dde2c701-cffa-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.93.232", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736637844, "uuid": "25e09757-d073-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.93.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736574064, "uuid": "a5a1d1ff-cfde-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.94.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736567823, "uuid": "1e357895-cfd0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.32.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736574724, "uuid": "2f0b6041-cfe0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.42.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736582763, "uuid": "e73693ae-cff2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.47.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736569565, "uuid": "2c1ab7f5-cfd4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.212.60.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736564466, "uuid": "4d06bb1f-cfc8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.252.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736598307, "uuid": "17b82645-d017-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.253.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736553784, "uuid": "6e12e5d0-cfaf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.48.143", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736633765, "uuid": "a6394c56-d069-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.52.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736574005, "uuid": "828d1572-cfde-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.55.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626684, "uuid": "299b720f-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.61.154", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736598065, "uuid": "879dc14d-d016-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.61.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736632865, "uuid": "8e203c22-d067-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.63.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736565244, "uuid": "1cf0a61b-cfca-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.140.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736634364, "uuid": "0b3ebe99-d06b-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.200.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736629385, "uuid": "738fec96-d05f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.133.73", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736566210, "uuid": "5c4864be-cfcc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.37.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626684, "uuid": "29a261b6-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.41.18", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736581206, "uuid": "46c6df08-cfef-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.41.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736577844, "uuid": "72e4a6c9-cfe7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.44.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736558345, "uuid": "0c92adc1-cfba-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.63.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587025, "uuid": "d30fef62-cffc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.152.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736636764, "uuid": "a22fb831-d070-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.192.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736639824, "uuid": "c1f31464-d077-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.55.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626684, "uuid": "299bc1ab-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.222.200.29", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736629385, "uuid": "73905bd2-d05f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.6.131", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736559784, "uuid": "667cc82f-cfbd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.7.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736633524, "uuid": "16ff20d7-d069-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.110.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563324, "uuid": "a41b104a-cfc5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.123.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626744, "uuid": "4de0639a-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.150.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736576164, "uuid": "897b90b5-cfe3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.159.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587988, "uuid": "115243a5-cfff-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.42.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736583665, "uuid": "0053d8a0-cff5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.54.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626684, "uuid": "299b1068-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.63.153", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736586184, "uuid": "dde1df8a-cffa-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.99.83", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736575684, "uuid": "6b7b7e18-cfe2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.131.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626753, "uuid": "52f4fbba-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.196.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736605084, "uuid": "df57a1fb-d026-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.239.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736639044, "uuid": "f0edb3eb-d075-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.31.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736639763, "uuid": "9dc2343f-d077-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.105.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587025, "uuid": "d31017ad-cffc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.161.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736554564, "uuid": "3ed936c5-cfb1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.168.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626752, "uuid": "523c5779-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.170.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736565425, "uuid": "885f734c-cfca-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.194.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736566510, "uuid": "0f38ee3b-cfcd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.202.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736607544, "uuid": "9948f7d0-d02c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.235.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587684, "uuid": "5bd39274-cffe-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.252.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736629385, "uuid": "738fc22b-d05f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.165.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626744, "uuid": "4ded17e7-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.185.185.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626752, "uuid": "523ec2da-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.185.240.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736575264, "uuid": "7137aa53-cfe1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.189.238.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736575384, "uuid": "b8bfc7f5-cfe1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.138.12.156", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626759, "uuid": "5655ceff-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.60.233.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736638326, "uuid": "44f20a48-d074-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.14.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736636163, "uuid": "3be15a07-d06f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.242.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736594644, "uuid": "905210ef-d00e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.243.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736562008, "uuid": "93d00001-cfc2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.153.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736632505, "uuid": "b79aee1e-d066-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.183.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626744, "uuid": "4de0e0fb-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.5.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736583184, "uuid": "e1e465bb-cff3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.82.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603406, "uuid": "f7160b5a-d022-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.173.87.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736637664, "uuid": "ba8041db-d072-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.175.115.84", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626744, "uuid": "4de4f5ef-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.175.71.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736586184, "uuid": "dde26c8a-cffa-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.188.45.148", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736554024, "uuid": "fd29919e-cfaf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.188.85.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601964, "uuid": "9b6ffd6d-d01f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.189.170.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736600467, "uuid": "1f0befc3-d01c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.202.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736572744, "uuid": "9323e66c-cfdb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.31.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626744, "uuid": "4ddc6010-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.76.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736559606, "uuid": "fc2f17fb-cfbc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.171.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626684, "uuid": "29a8cfca-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.7.221.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736565425, "uuid": "885f4a6d-cfca-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.241.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626745, "uuid": "4df36f51-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.131.138.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736578505, "uuid": "fce2400e-cfe8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.235.175.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736637664, "uuid": "ba8d0cc4-d072-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.229.191.196", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736632505, "uuid": "b79b027b-d066-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.138.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736605624, "uuid": "214c763a-d028-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.182.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736562306, "uuid": "45acc868-cfc3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.211.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563384, "uuid": "c82763aa-cfc5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.229.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736606584, "uuid": "5da08f44-d02a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.42.42.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736596985, "uuid": "03a3a2e9-d014-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "139.5.0.95", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601485, "uuid": "7dd008ec-d01e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "154.213.187.118", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601485, "uuid": "7dcfff87-d01e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "157.173.202.137", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736637664, "uuid": "ba8c18cd-d072-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "159.117.181.82", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736638326, "uuid": "44f20cdf-d074-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "163.142.89.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736557624, "uuid": "5f08f90b-cfb8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.37.173.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736586184, "uuid": "dde274af-cffa-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "172.168.120.183", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736596985, "uuid": "03abc9f0-d014-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "172.168.120.200", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736596985, "uuid": "03a8574b-d014-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "172.32.235.65", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736586184, "uuid": "dde1c1dd-cffa-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "172.35.0.6", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626686, "uuid": "2b29ae1a-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "172.36.0.116", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736578263, "uuid": "6ce896a8-cfe8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.188.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736568244, "uuid": "18c552bd-cfd1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.149.173.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736577724, "uuid": "2b55db29-cfe7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.149.204.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736596866, "uuid": "bcc7b5c5-d013-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.149.81.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736565544, "uuid": "cf79aefa-cfca-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.141.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736588224, "uuid": "9e022ca7-cfff-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.81.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736637784, "uuid": "01e7e0d6-d073-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.82.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736556306, "uuid": "4d5e2917-cfb5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.173.84.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736592905, "uuid": "83f45d5f-d00a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.31.246.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736592363, "uuid": "411a858e-d009-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.9.252.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736553784, "uuid": "6e12ffec-cfaf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "177.163.250.59", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736635324, "uuid": "4795eb2d-d06d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.245.131.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736629385, "uuid": "739018a2-d05f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.115.122.57", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736604607, "uuid": "c3092242-d025-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.116.71.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736636463, "uuid": "eecd4589-d06f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.219.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736628724, "uuid": "e9a96f82-d05d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.27.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736567165, "uuid": "95998e27-cfce-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.37.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736591344, "uuid": "e1c67a52-d006-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.38.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736560444, "uuid": "efb61730-cfbe-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.249.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736591163, "uuid": "75ff31f6-d006-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.249.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736635264, "uuid": "23db654e-d06d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.33.199", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736596144, "uuid": "0ecf074b-d012-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.88.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736560444, "uuid": "efb60d3c-cfbe-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.9.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736639464, "uuid": "eb5e0b41-d076-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.166.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736562485, "uuid": "b01c0425-cfc3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.41.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736580544, "uuid": "bc95342d-cfed-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.78.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736630284, "uuid": "8b812bc9-d061-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.161.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736561584, "uuid": "97330351-cfc1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.55.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626744, "uuid": "4ddfd723-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.235.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736630344, "uuid": "afa9bd1d-d061-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.252.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626752, "uuid": "522e8267-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.15.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736581083, "uuid": "fdd42461-cfee-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.114.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736570944, "uuid": "622cb4be-cfd7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.123.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736589964, "uuid": "aae14bf8-d003-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.153.184.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736578866, "uuid": "d4183e90-cfe9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.240.63.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626752, "uuid": "5299ba2a-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.247.154.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736577424, "uuid": "78570855-cfe6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.60.14.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626684, "uuid": "29a39481-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.60.4.9", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736632865, "uuid": "8e1f7bfd-d067-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.157.247.79", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736637664, "uuid": "ba8afee1-d072-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.168.227.130", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736637664, "uuid": "ba8e862d-d072-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "189.131.137.159", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736558705, "uuid": "e33f3b2d-cfba-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "190.74.46.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736600884, "uuid": "17e64f5a-d01d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "190.74.6.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736553784, "uuid": "6e11fcfc-cfaf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "190.77.60.11", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736553784, "uuid": "6e129152-cfaf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.111.100.50", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626744, "uuid": "4dddb947-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "197.207.98.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736573044, "uuid": "462b565e-cfdc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "198.251.82.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736637664, "uuid": "ba806b8d-d072-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.180.18.98", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736637664, "uuid": "ba86f787-d072-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.183.103.99", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736594407, "uuid": "02fff701-d00e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "201.119.155.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736592363, "uuid": "411a7583-d009-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "201.208.57.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736586244, "uuid": "01f565e4-cffb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "201.208.62.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736637664, "uuid": "ba839be8-d072-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "203.189.158.140", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587810, "uuid": "a76161a7-cffe-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "212.81.47.243", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736579584, "uuid": "7fe50b7e-cfeb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.29.28.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736556725, "uuid": "47264e3d-cfb6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.203.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736555884, "uuid": "520593a9-cfb4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.37.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736577543, "uuid": "bfd8d6d3-cfe6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.21.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736579884, "uuid": "32e11936-cfec-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.202.107.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563924, "uuid": "09f5222b-cfc7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.202.235.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736565124, "uuid": "d5282083-cfc9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.134.173.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736553784, "uuid": "6e12b180-cfaf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.135.201.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736564406, "uuid": "298faa9b-cfc8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.21.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736632744, "uuid": "45aac206-d067-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.105.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736639344, "uuid": "a3cee493-d076-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.206.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626744, "uuid": "4de7fd9f-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.198.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736575807, "uuid": "b4950677-cfe2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.233.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736560807, "uuid": "c7f4672a-cfbf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.139.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626744, "uuid": "4dee4fdc-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.212.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736607064, "uuid": "7bac4089-d02b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.26.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736575384, "uuid": "b8c03b75-cfe1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.60.50", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736627644, "uuid": "663d5be9-d05b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.10.52.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626744, "uuid": "4de36c86-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.11.56.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736589364, "uuid": "45346420-d002-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.13.57.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626684, "uuid": "29acfe1a-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.13.85.22", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736629984, "uuid": "d8b859e8-d060-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.221.73.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626684, "uuid": "299f7d0f-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.8.196.9", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736556184, "uuid": "0464116f-cfb5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.8.29.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736554624, "uuid": "62fdc4de-cfb1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.8.34.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626752, "uuid": "529a0f18-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.9.41.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626691, "uuid": "2e532fc0-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.111.75.24", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626691, "uuid": "2e2abddd-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.111.75.96", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736589364, "uuid": "453473fe-d002-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.20.75.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736574064, "uuid": "a5a1bc1e-cfde-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.47.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736562245, "uuid": "217dd114-cfc3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.178.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736602924, "uuid": "d7d3d10f-d021-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.222.33.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736590084, "uuid": "f2c585f6-d003-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.101.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626744, "uuid": "4ded13c6-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.107.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626752, "uuid": "52822dd2-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.117.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626744, "uuid": "4deef3f9-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.124.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626752, "uuid": "52623b02-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.75.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736576406, "uuid": "1a0f1206-cfe4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.81.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736637664, "uuid": "ba8b87c4-d072-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.67.2.177", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736637664, "uuid": "ba869200-d072-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.68.90.29", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736557624, "uuid": "5f08def1-cfb8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.57.173.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736586184, "uuid": "dde17847-cffa-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.35.136.233", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736571124, "uuid": "cd98588d-cfd7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.142.22.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736596985, "uuid": "03a1b519-d014-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.29.73", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736584865, "uuid": "cbc1c584-cff7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.59.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626758, "uuid": "56316c80-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.79.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736567284, "uuid": "dce1e9d5-cfce-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.132.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736607607, "uuid": "bf142f95-d02c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.236.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626744, "uuid": "4de478bf-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.39.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736565963, "uuid": "c9a1a16a-cfcb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.238.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736576107, "uuid": "675ccc9b-cfe3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.236.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736602865, "uuid": "b466f3e7-d021-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.139.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736568184, "uuid": "f5579b8b-cfd0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.231.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736579824, "uuid": "0f0b178b-cfec-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.215.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626753, "uuid": "53157046-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.49.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736628484, "uuid": "5a8a5e43-d05d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.90.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736559906, "uuid": "af2ec36f-cfbd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.234.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736581206, "uuid": "46c6b7ef-cfef-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.101.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736578084, "uuid": "01c94885-cfe8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.112.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736557563, "uuid": "3a839567-cfb8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.187.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736586424, "uuid": "6d054de9-cffb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.22.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736633284, "uuid": "87a6b60d-d068-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.171.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736571606, "uuid": "ed177b06-cfd8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.8.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736565724, "uuid": "3b0ec26b-cfcb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.9.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736559725, "uuid": "42eb649f-cfbd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.56.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736631484, "uuid": "57088f2d-d064-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.6.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626744, "uuid": "4dded91c-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.75.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736593624, "uuid": "30cc23fe-d00c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.53.120.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736628424, "uuid": "36ee3c16-d05d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.56.197.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736565963, "uuid": "c9a1957d-cfcb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.58.171.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736606464, "uuid": "15d74763-d02a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.6.57.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736597884, "uuid": "1ba63812-d016-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.180.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736558284, "uuid": "e89596d8-cfb9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.86.167.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736560384, "uuid": "cbd272c2-cfbe-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.87.116.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736564584, "uuid": "938f1f1b-cfc8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "43.230.156.14", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736586184, "uuid": "dde2cca8-cffa-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.164.178.134", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736596985, "uuid": "03a2694d-d014-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.164.178.142", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736586184, "uuid": "dde16e5a-cffa-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.164.178.148", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626684, "uuid": "299bf8fd-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.164.178.157", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736596985, "uuid": "03a302e8-d014-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.164.178.48", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626684, "uuid": "29b71bbd-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.164.178.74", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736586184, "uuid": "dde19024-cffa-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.164.178.81", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736596985, "uuid": "03a59c5d-d014-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.164.178.95", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626684, "uuid": "299baddf-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.93.20.67", "Tag": [ { "name": "MeduzaStealer", "colour": "#635865", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601485, "uuid": "7dd2e0ff-d01e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.95.146.110", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736635324, "uuid": "4794a1cf-d06d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.181.159.16", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736636463, "uuid": "eeccb36e-d06f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.181.3.170", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "webdav", "colour": "#65d452", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736637664, "uuid": "ba8e96ca-d072-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.237.230.6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736602446, "uuid": "baec4fc7-d020-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.47.120.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736573044, "uuid": "462ac385-cfdc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.133.38.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736587684, "uuid": "5bd3d377-cffe-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.102.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603884, "uuid": "13bbac63-d024-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.119.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736559606, "uuid": "fc2fb0e6-cfbc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.218.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736592905, "uuid": "83f2d4ae-d00a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.252.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626744, "uuid": "4dedc270-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.80.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736584807, "uuid": "a91b7c1f-cff7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.91.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736565784, "uuid": "5e995396-cfcb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.93.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736565365, "uuid": "64a57618-cfca-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.95.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736637664, "uuid": "ba8ae453-d072-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.106.131", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736637664, "uuid": "ba80a8d6-d072-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.119.247", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736562245, "uuid": "217dbc29-cfc3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.121.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626684, "uuid": "29af3108-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.240.28", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736575807, "uuid": "b4951e1c-cfe2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.244.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736557983, "uuid": "352c8a4b-cfb9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.247.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736557384, "uuid": "d00baf67-cfb7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.248.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626744, "uuid": "4de35ca7-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.251.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626744, "uuid": "4ddd8523-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.251.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736574423, "uuid": "7bd834b0-cfdf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.255.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736556725, "uuid": "47260635-cfb6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.39.128.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626684, "uuid": "29a6ea64-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.10.150", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736629385, "uuid": "738f5e61-d05f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.10.193", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736567884, "uuid": "4242da27-cfd0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.20.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736568364, "uuid": "6071e7d9-cfd1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.224.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736600224, "uuid": "8e79affe-d01b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.229.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736575744, "uuid": "8f61c451-cfe2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.229.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736571363, "uuid": "5bcab3ba-cfd8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.231.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736579044, "uuid": "3e4745cd-cfea-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.239.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736560563, "uuid": "36e454fd-cfbf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.38.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626754, "uuid": "53d0e716-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.4.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736596985, "uuid": "03ab5397-d014-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.4.224", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736635264, "uuid": "23db4da9-d06d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.41.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736560624, "uuid": "5b07cad4-cfbf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.43.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736581265, "uuid": "69d90591-cfef-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.47.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736597344, "uuid": "da0cc6a1-d014-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.7.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563506, "uuid": "10f34efa-cfc6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.71.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736597644, "uuid": "8ce53b40-d015-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.168.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736568364, "uuid": "6071d67f-cfd1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.92.185.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736601545, "uuid": "a19614ff-d01e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.231.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626744, "uuid": "4de73f3c-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.45.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736556606, "uuid": "ffff08b7-cfb5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.119.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736559192, "uuid": "0582ead6-cfbc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.83.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626684, "uuid": "29a738b9-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.85.169", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736638084, "uuid": "b4b46f32-d073-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.92.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736574483, "uuid": "9fe42707-cfdf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.136.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736561043, "uuid": "54c4c6e4-cfc0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.136.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563084, "uuid": "15455b31-cfc5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.138.237", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736566270, "uuid": "809a4aa7-cfcc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.139.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736574964, "uuid": "be3edeb3-cfe0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.249.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626687, "uuid": "2b7a2649-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.250.245", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736577125, "uuid": "c673965f-cfe5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.255.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736575384, "uuid": "b8c013aa-cfe1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.98.141.14", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736636163, "uuid": "3be137dd-d06f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.19.223.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626753, "uuid": "52f4cf4b-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.211.47.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736574724, "uuid": "2f0b4ec0-cfe0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.232.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563264, "uuid": "80b083db-cfc5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.237.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736569384, "uuid": "c03cea0e-cfd3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.12.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736564525, "uuid": "6ff39a99-cfc8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.209.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736568184, "uuid": "f5583dc7-cfd0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.213.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563744, "uuid": "9eef3894-cfc6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.218.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736568963, "uuid": "c5a45f1a-cfd2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.218.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736575863, "uuid": "d66e9af0-cfe2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.223.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736564466, "uuid": "4d079142-cfc8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.9.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736602144, "uuid": "06a1d1ef-d020-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.230.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736578505, "uuid": "fce2594e-cfe8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.245.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736557207, "uuid": "666761c3-cfb7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.108.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736560384, "uuid": "cbd2918a-cfbe-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.134.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736561224, "uuid": "c0cb6090-cfc0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.215.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626684, "uuid": "29adc0cd-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.26.29", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736563445, "uuid": "ec5a635c-cfc5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.88.12", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736557563, "uuid": "3a83a9bd-cfb8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.99.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736586724, "uuid": "2001d6e6-cffc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.62.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736565185, "uuid": "f9766c83-cfc9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.107.237", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626745, "uuid": "4df919c9-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.251.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736632564, "uuid": "da878278-d066-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "66.23.157.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736635624, "uuid": "fa4c4689-d06d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.93.157.113", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736637664, "uuid": "ba8bf46d-d072-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "82.52.26.162", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736578444, "uuid": "d87e95e9-cfe8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.222.191.91", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603164, "uuid": "66ebf2b1-d022-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "89.23.103.58", "Tag": [] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736586846, "uuid": "685e2281-cffc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "admin.bookrepluguest.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736636466, "uuid": "f01c6b1c-d06f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "autoparts-online.us" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736626684, "uuid": "29c172b0-d059-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "candwfarmsllc.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736586844, "uuid": "673c87e8-cffc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "electricreport.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736635264, "uuid": "23f5513d-d06d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "g.gsm2.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736628546, "uuid": "7fa4f623-d05d-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "mail.simon.sttdiakonos.ac.id" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736636466, "uuid": "f037d634-d06f-11ef-856f-82aee05be84a", "comment": "Malware payload delivery host", "value": "mon-lo.online" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736577484, "uuid": "9c96b3d9-cfe6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "qualquercoisa.a890027-blog.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736603165, "uuid": "674c89a7-d022-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "solve.bogx.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736586847, "uuid": "68e12eeb-cffc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "staplebrokenmetaliyro.blogspot.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1736577485, "uuid": "9ce40b31-cfe6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "tnow-prod-apac.367791ca7abea81096902b345fee7b1f.r2.cloudflarestorage.com" } ] } }