{ "Event": { "published": true, "date": "2026-04-02", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-04-02", "timestamp": 1775175322, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "84dbcff9-a572-40aa-bd65-d5f056622a7e", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1ca7924-2a97-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775088331, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775088331, "uuid": "ea4c66bd-916c-4b71-af44-9d93d559b98c", "comment": "Malware payload (Mirai)", "value": "98647a552e3e2ad7d1c3eb54be21ed97", "object_relation": "md5", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775088331, "uuid": "939f2d66-b377-4e03-acf9-8b05a13aa573", "comment": "Malware payload (Mirai)", "value": "c2fdfce419267542c98066a78e578644c5c95f6bb877df5cbac00f65d8b5d34b", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-80", "colour": "#04bdf7", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775088331, "uuid": "67dc1be9-7ec9-4ade-9f82-9d503c31d9ef", "value": "T15CA1B4E974B4936B2DB0ED7375D6CA42F24061A7E0C91C0EE6D6F0E8498CF61F494B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775088331, "uuid": "429e3c8d-4a15-4473-a9a0-5311f98e03a0", "value": "48:vpK8KMV4kEpKDK1V4opKrOKrWV4bpKQKoV4tpKE0KEEV4EppKUKkV4JpKDK1V4oa:v3OdRbKXmTGEpp78FtjTf6jEtjrnjs/J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775088331, "uuid": "ccc2f9a1-0d76-49ca-87b4-30d641cc141b", "value": 4793, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775088331, "uuid": "de528ee4-8410-4f3f-9c28-98f67cc64a16", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "629db80e-2e29-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775089070, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775089070, "uuid": "389cd610-5a2a-4ae9-b5b3-0f60fea20565", "comment": "Malware payload", "value": "b780d213440577cd8cf7fbb473b7e3bd", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775089070, "uuid": "3eb399dc-9956-47d9-a74f-7eed99509b2b", "comment": "Malware payload", "value": "db8c6cf2b1d98ad069df374ce798f580d997aea3874a3fa06196f920eb483bae", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775089070, "uuid": "aeec1194-1425-4747-87ce-a2583ed69466", "value": "T10793E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775089070, "uuid": "3db4bfb4-b366-4819-b415-84da53aaa964", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXzIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775089070, "uuid": "db916965-622c-459e-af11-992c2b117728", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775089070, "uuid": "0f960b06-17ec-45e4-9033-555d654ee0f3", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1775091189, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775091189, "uuid": "587eb87d-8c5c-40f6-a478-2888d9d43f43", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775091189, "uuid": "d6005915-82a1-425a-b6f3-89e782321bdb", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775091189, "uuid": "9cf7ba49-b8f6-49d8-9628-8cc1f247b6cc", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775091189, "uuid": "24a6bb4c-32eb-4910-abe3-77d7fc220116", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775091189, "uuid": "cb22687b-1123-456a-85b1-6695e56e3ef9", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775093115, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775093115, "uuid": "d376a557-8d83-4ec5-9d8e-cdef802efabe", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775093115, "uuid": "efbf1cdf-f53c-4769-ae69-cf14e61ec768", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775093115, "uuid": "398bd795-4063-4dd8-a331-b9d97cdd28fe", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775093115, "uuid": "8d63c6ad-fd56-4828-80b9-a6732c1cf7db", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775093115, "uuid": "7b414559-4285-4042-b965-4147c2c5191c", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775094501, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775094501, "uuid": "ba7852c1-38ca-43e0-9515-1b5ea5e84b57", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775094501, "uuid": "744b2a58-6963-43ec-a718-24df88094d9c", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775094501, "uuid": "c02bb0de-b0fb-4645-8e81-62ac2a9cfdce", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775094501, "uuid": "0c4fd5fe-f135-41b1-a84a-25e5f5a02419", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775094501, "uuid": "bf22ac83-0a30-49fc-9dad-f8b781435523", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66b57c17-2e37-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775095090, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775095090, "uuid": "fc40c5ba-5e79-4fa5-9fdc-c5a018a2fa3d", "comment": "Malware payload (Mirai)", "value": "87282b88559b834feb58d0ab90e07a77", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775095090, "uuid": "58a98a27-e0aa-4953-827f-e90ed489afe8", "comment": "Malware payload (Mirai)", "value": "821367d17c3c39749516508534078680561b68bf156b82226b3dba555bc53caa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775095090, "uuid": "47582eb3-7300-47e1-983c-c132845f2688", "value": "T144E30B46F8814B12D5D111BAFE1E528E37131BB8E2DF73029D246F647B8A97B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775095090, "uuid": "723d78ce-6584-49a5-80b5-d87c1156f2d9", "value": "3072:DHea4CTDUjnwJIXMb6kzz5aTHACdYV8P4eLU:zePCTDQ6IXu7zdaM38P4eLU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775095090, "uuid": "47d7c83b-22c6-4f58-a2fb-1a3bfd3fe5fd", "value": 144156, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775095090, "uuid": "363df2d3-76b7-4e70-9e72-616b90fad44c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66b95e57-2e37-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775095090, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775095090, "uuid": "428efcac-6ce3-4cc7-bed6-e03d7f513d77", "comment": "Malware payload (Mirai)", "value": "7c24e612ffe685952062459a541b36fa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775095090, "uuid": "4ed8519a-73b1-4108-a1c9-c8246c17c9a7", "comment": "Malware payload (Mirai)", "value": "9038666d4d8453c9ff139103ff6ab135183c4154396db9b3e5c60700cba168a0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775095090, "uuid": "659fd1dc-9c22-4167-ba16-2a385ab6977e", "value": "T120D30945F8504B23C6C611BBFB5E428D3B2A17E8D3EF720399256F60378695B0E3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775095090, "uuid": "0fcc158b-26ba-4f05-9444-989c897d097d", "value": "1536:UFKdzElm18uZJNb4AdFa8eAZHk4VB7fzTTr71igYSvGueqZvd2UlqKwyw6RNPYTa:UFKp50yU8e947Lb71izSftBdRalKL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775095090, "uuid": "175d5a66-1b5f-4a5a-b766-6e1e15880b0d", "value": 133920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775095090, "uuid": "8066a3c4-3efe-4d21-844d-1f0a767aace4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66baf6e1-2e37-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775095090, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775095090, "uuid": "2f768081-2bde-4766-862c-b5f1ae3b7dff", "comment": "Malware payload (Mirai)", "value": "74c1f6c42b89a0acd243d81b673f45b0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775095090, "uuid": "6d8f7676-9757-43fe-934e-f7791d2f7b07", "comment": "Malware payload (Mirai)", "value": "079c423edfb7021aa08ab7a315deebad704958d78df5b781b398869379cda7a7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775095090, "uuid": "caee1589-2e3c-41ee-9651-848c78243e9f", "value": "T16BC31B45FC405B23C6D612BBFB5E428D3B2A17E8D3EE720399255F60378685B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775095090, "uuid": "caff2915-3cc8-4b43-9521-c463ffc0e179", "value": "1536:p/Ka0rG5yC/cMChygtiOBdWFAcJX4VlgXTAXYFkWUGZrSo51WhrV1l3GwywEReQD:ZKaprMh7sOXWFh4UXcYFkWpZlvWNUmL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775095090, "uuid": "ef115889-7a1d-486f-9b12-ea60b0212295", "value": 129824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775095090, "uuid": "7212f55e-8308-4074-9cab-96f02d4a10fe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "925a93bd-2e37-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775095163, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775095163, "uuid": "207641a9-a95b-40e0-811e-98a720787e72", "comment": "Malware payload (Mirai)", "value": "8f81a5751ca63ca929474b82e49c0231", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775095163, "uuid": "ea2ec6df-bbdb-4ff2-b39b-4b2b9a3102df", "comment": "Malware payload (Mirai)", "value": "e7c9694251858e8272691b8ff1293b16af2b38cb1cd3e12e324d2d115e60b1f9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775095163, "uuid": "3c48cc25-4a5d-4464-8682-2738ace1384e", "value": "T166937CC0F683C4F2E84705B1507BE7379B32F1B9101AFA43D3699A72DC91951EA1AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775095163, "uuid": "23d343e2-098e-4390-ab79-bfba77ccdda8", "value": "1536:W/QCZaxGdvts3i5JPhoRsxPu++4HRsUIKqI4FrS4LSJ:WYCZa8dvm3oJPhssxP5lR+KfUmDJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775095163, "uuid": "7ed272f6-fcff-4ed8-afb4-d1962fb085e0", "value": 89992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775095163, "uuid": "15ae1c3d-3adf-4297-a516-154a32153bf0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "925b2bd9-2e37-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775095163, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775095163, "uuid": "2970afd4-8f79-4880-80e4-9df0681869b4", "comment": "Malware payload (Mirai)", "value": "88f2472370880b04b20eb31df333d45c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775095163, "uuid": "62059d89-8385-4747-97dd-08715dac7567", "comment": "Malware payload (Mirai)", "value": "746730d05e45ef4a29e690d5b7c5f1a36db788b3e168debb3989983c47eefb70", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775095163, "uuid": "eba5f726-7677-4976-a62d-89bea002173c", "value": "T17404B719AB510FBBDCAFDD3702E90B0139CC955B22A93B363674D528F54E50B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775095163, "uuid": "cc67638a-e375-45bd-8f91-f19ba05e8095", "value": "3072:nKpzGeeNkSfcQqmav8SqaRVlnYz65sVt:nKYeeNYQqmeqavlg65s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775095163, "uuid": "93a0bbdd-d169-40db-bc57-c8d8d1713aca", "value": 177760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775095163, "uuid": "7836975f-56f5-4e30-bbcf-8c6fe77e900c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "925c16e7-2e37-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775095163, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775095163, "uuid": "583fc193-8976-4214-965f-4b4d68ba3cf8", "comment": "Malware payload (Mirai)", "value": "036336213ebd61e6612dcccd74b4835e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775095163, "uuid": "52c194d2-2507-46c6-921e-37129e7198bb", "comment": "Malware payload (Mirai)", "value": "dae399b45c54e875bc81ab3d05f994ffa14f79d9de1ebc4747a255a73545fd9c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775095163, "uuid": "79d72bfd-a2f3-4ce7-89a9-e98d89a96b0e", "value": "T11DB35BB3CC26AF98C655D074B0B18FB92F53A59482471FBE19B6C2B44443D8DFA05B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775095163, "uuid": "180d6fe5-f2db-482f-b7b6-3878ca00d7b4", "value": "1536:OTW/VCxsHZusN2Li62C87mKjR5fvPVWARouW8j3W+gJH7n:OytCxsNx62NVjzVWxuWM3byL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775095163, "uuid": "b30ac275-653a-4245-8b29-373fccf28a09", "value": 117568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775095163, "uuid": "f4cd2c77-e4bb-4e12-99af-83414602803d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "925f29ee-2e37-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775095163, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775095163, "uuid": "32112b20-c107-46c2-a054-745acd49057f", "comment": "Malware payload (Mirai)", "value": "33f0b601ba62598647fe96af9aaa2086", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775095163, "uuid": "ab60174d-fd35-4291-9b73-0d190feb46aa", "comment": "Malware payload (Mirai)", "value": "919617505b2c7c72e4e3cccfe1fdcd0bcc52e441ef7fdf95a74dfcfd78838abf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775095163, "uuid": "b86fecba-0ea6-4522-be4f-8d3402b86172", "value": "T1CAD32A06730C0A47D2632EB03A3F67D197AF9AC121E4F640355FAB8A95B1E335586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775095163, "uuid": "635b280e-ce54-4b12-a8b3-332a6c155a79", "value": "1536:troGHNTUZNHlIBUiCxfytmtewMDNna/w4o7lbEJvAhh3rp+JuQfqAg87O3p:3mWUiCxttqCwZ7lLhrIS3p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775095163, "uuid": "4f5c571f-1c26-4d7a-8e93-097d254716ec", "value": 134036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775095163, "uuid": "1a95a15c-ca82-4251-b384-bdcc2b5d06bc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9261f0fb-2e37-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775095163, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775095163, "uuid": "a74976c8-777f-4b93-9db5-8ad6b89a9547", "comment": "Malware payload (Mirai)", "value": "6573311121fdf5fc4eb4f4d3349960c1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775095163, "uuid": "cf889a89-cc1a-44b8-a82d-8846d2c5fc23", "comment": "Malware payload (Mirai)", "value": "bd68729f0f1c1ed5b36551f0b32f9f46a91d3370a7c4f79a5cd7c0450791c109", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775095163, "uuid": "49552fb9-3def-44a5-879f-796df0780de0", "value": "T1DAD35C17B5C180FDC4DAC1744F9BF53AED32B1A91238B26B27D4AF222E49E205F1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775095163, "uuid": "187252d5-6f5b-4b6b-aab5-cec2b7310125", "value": "3072:79eSuygEPjt6qkWqMdKmDnYMb0gBd/gQyVGsdqml6qaj:79eSuygEPjt6qkWqreH2laqa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775095163, "uuid": "458f8a76-860f-4f5e-a725-c33ed7fd97ff", "value": 139800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775095163, "uuid": "b983ebd1-0256-4907-af50-c4730578babc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "926386d6-2e37-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775095163, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775095163, "uuid": "c004b97a-d751-44b4-a0f2-14dcaaa76378", "comment": "Malware payload (Mirai)", "value": "bf867f5b7dae264bfcbc4a519ba05aa8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775095163, "uuid": "0f49a1b6-c7d0-491c-ac70-909fa02be29e", "comment": "Malware payload (Mirai)", "value": "d9b7c50da76ee74e92bcbb5498308e1144b02c0502348caf0b9ba1ba47491006", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775095163, "uuid": "f9bba002-bdd5-4305-bdc8-69c6a4c3c2d7", "value": "T10F04881D6E228F7EF668873147B74E25976C23DA27E1D640D2ACC1106E6029E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775095163, "uuid": "ccd52740-222a-4532-aa8b-3057efbedb88", "value": "3072:jg57Rj7LHZwbq1YSBan1yvbysxr1uGSmI:jglRj7LHZ0Bqyy1BSmI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775095163, "uuid": "9130d431-cb95-4b19-946e-1fcb39e368c4", "value": 173888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775095163, "uuid": "4009db1b-1f62-4e67-899a-749c7976737b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9265fe92-2e37-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775095163, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775095163, "uuid": "76e0508f-2bf9-4a19-a077-80953caaf954", "comment": "Malware payload (Mirai)", "value": "ed3461a121c1684f59653192bf118840", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775095163, "uuid": "11450f5f-a8b9-471f-ad5f-c72a3414d1e4", "comment": "Malware payload (Mirai)", "value": "184582c73e42035e4db9c0a298f65cda04dd19c5bc5faf02b47700c8e158b9cb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775095163, "uuid": "d895b744-838e-4356-b13d-28c744f8810f", "value": "T1D3E329C7F800DEFAF80AE33648570905B630BBE115921B372257797BED3A1991963E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775095163, "uuid": "d28363b4-2ae9-4f0d-8780-58c083977d3b", "value": "3072:GmzTDH86JG78FenJljAX0Gidw+w9EEVvjbiQLZrEyqKY9f:G2TDH86JOHjAX03dC9EMLmyql9f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775095163, "uuid": "d4a6e522-955c-4cb1-920f-938a33d14efd", "value": 150464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775095163, "uuid": "1fda754d-0669-440a-9c29-094057d7aafd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1775095688, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775095688, "uuid": "34e89cef-d701-4527-88ed-1e312f906c20", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775095688, "uuid": "b5dd5e6f-b123-45c6-a8a8-28d3fbffb7ea", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775095688, "uuid": "576113b4-1d40-4dfc-b813-d8cba629efe4", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775095688, "uuid": "997b8837-f465-4355-88f9-59e035b58721", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775095688, "uuid": "bfe42a18-6d10-4fb6-8f5e-2fcfd3eda2cc", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ed1a380-2e47-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775101841, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775101841, "uuid": "bf76fa61-a4b9-4b48-8edc-599c298d7bf5", "comment": "Malware payload (Mirai)", "value": "65884f3f0f27045208939d4fc3df595c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775101841, "uuid": "e0d1e2d6-fa0d-4878-8b4e-700c13688500", "comment": "Malware payload (Mirai)", "value": "b68de150b2ac4d6ca6bb83eaa5cf4f65600dabc3d4745d88444e4708d60554db", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775101841, "uuid": "d6cc31da-479e-4460-ab2e-acfd94f71cbd", "value": "T143A533CCDF4BC8B7396158CAFA24B74665B941366C5F6B121C1D225AD8F1B2A2028F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775101841, "uuid": "fe9af018-9ef2-4319-bfba-3546d4075d8d", "value": "49152:KJ2p7rV3i3afuU76EDp3qNZf76BVWaVx77qArMhK:ie3iOmaSj6BNv7lrM8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775101841, "uuid": "f2c569f3-df90-4e91-9b84-8eae50bcaba8", "value": 2088700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775101841, "uuid": "43be6fc2-3fd1-4532-99b9-7c4a0df0931e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d7cf96fa-2e48-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775102581, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775102581, "uuid": "a0294dab-7f88-40d6-839b-2eae4e1ae7fc", "comment": "Malware payload (Mirai)", "value": "3c75495aa5137ec86bc15320958687b5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775102581, "uuid": "c454fc81-cc5d-4bb9-91a8-93ba926df8d5", "comment": "Malware payload (Mirai)", "value": "dcc0f652104d6d7f9a078126a3439dabb9d97f2848df64b0bc62f195aa422284", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775102581, "uuid": "6627b1ee-1001-4975-8c04-a433deccb9e3", "value": "T14AA53338E82FE99FD9D6130B13E35D157EE896FD731DEA49900E44008D7A749A81EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775102581, "uuid": "457a3bfb-32e3-4341-989c-9ad077ed89b4", "value": "49152:fFOsXsBZyzdfzobYKW8CVQ2DbAvxEl9DBQC1:hXIZEfKSVZcv611", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775102581, "uuid": "2bc48c20-5c96-4a73-ae59-a383af4ecde8", "value": 2074016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775102581, "uuid": "8aee4788-0db9-4a6d-951d-0452ff6482c1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "760eeda6-2e4a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775103276, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775103276, "uuid": "1a4deada-b2a9-4ac1-b1b6-b99050fb65f0", "comment": "Malware payload", "value": "99953daf0e93e25266c113ffccbef544", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775103276, "uuid": "786852df-6191-42bc-a0d3-38868131d769", "comment": "Malware payload", "value": "a3d6674d30fb27e5f8cd57b5156d53a136ec2750caba61990bdffbdb6982c3db", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775103276, "uuid": "def7807a-082e-4662-8836-d990f85284b0", "value": "T16B34F18B32E6087519331EB41A31DE3C0A2FF1D1F8D81116A449093596BD56E3F6BB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775103276, "uuid": "9c0a1e1f-1b5c-4437-ad82-622f8efef7c5", "value": "3072:RgO0BXxvUykiIg9OPp1H4rNO818wwJdWoBdWLg8mJaEn/KGXqtOYIQo1FbW43Dx7:Pyhszi14p1H4pOuFwrdWLgT/KYaxKbd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775103276, "uuid": "529ba088-22c6-4548-8da6-7f1217f52c02", "value": 247878, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775103276, "uuid": "daa7b8d8-5df5-40dc-9009-587472fe03e7", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "144631c9-2e4d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775104401, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775104401, "uuid": "7fa7cb69-22da-4b8a-b8e6-48da9456bfbd", "comment": "Malware payload", "value": "031b20cc9fd0a9c62f11a31431018444", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775104401, "uuid": "ed81da57-3321-4c66-9627-4ec5756ad788", "comment": "Malware payload", "value": "b61045642980f233adebe8d3c27ce218585300f297f3b70a7fb3540ed4501b09", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775104401, "uuid": "198b143b-000b-43d9-90d0-a505f0ce45e2", "value": "T1968309327488582A210B428FD267336C70EFDCE2D611E5B6F6F622344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775104401, "uuid": "d1134217-db54-439f-b7b9-cd2e3db40cb3", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnHWaLVN/:XEKltp9txAX/yr2pbHWmVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775104401, "uuid": "b7ce073d-2011-4112-bd94-8cff8d261462", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775104401, "uuid": "bac17a92-eaad-463f-99f0-d271d1861282", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "047ed567-2e4f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775105233, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775105233, "uuid": "dfbb05e7-3630-4d31-8604-e161eb9a94e4", "comment": "Malware payload", "value": "b6bd0a4435c8fd5e3d8ea581fb01347e", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775105233, "uuid": "8df6592f-afa6-4262-8f8a-4ac0a08e227a", "comment": "Malware payload", "value": "639de7d92dea86399dc6117af21d8d8d8eade60bbdd85350b838f8c4c4104cc1", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775105233, "uuid": "36286152-a9cc-44a5-9762-c2aee9fdb824", "value": "T1CF5733BB5222695CE0978AF4B0C2DAB214637C1C08B1114B72EF13D52E72A5A2F7F5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775105233, "uuid": "f1eab175-da38-4eea-8e7d-acf30feaa989", "value": "88f70fb82598484a7ce88eef6418418b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775105233, "uuid": "f3f46445-0242-416a-8e2e-029df21dfcde", "value": "786432:NiCaa7y3rc/OlBy9g4aLpOQlqjfLZSZgC:Gnrc/OlBhhLphlEfVSl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775105233, "uuid": "d68f6966-96ca-48bd-ad2f-0996b5fd3cd5", "value": 28458360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775105233, "uuid": "d21bee21-e915-4833-aa7c-9c9a956d3d9f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a8f4afe-2e1c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775105725, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775105725, "uuid": "50c882b8-a0c6-4e31-b56b-d23c324e4157", "comment": "Malware payload (Mirai)", "value": "01f16797629288066ac530c8cbe02568", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775105725, "uuid": "97d38cea-3bf9-4b12-9f37-f06c81f0dc44", "comment": "Malware payload (Mirai)", "value": "bb61ff20bf46854ba1a14f5840d623bd22a09df7316f6c4bd86a55dd04f85f58", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775105725, "uuid": "c01e14b6-6a2e-4f8d-8a63-30ab3067e37e", "value": "T1BCB533F648A8036F69845BDC5BCA77D0867F8000AA5CF1C19C5978C75C34BEB6E0B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775105725, "uuid": "ca3872ef-c9fd-46d0-9f2e-a94bdf7b1491", "value": "49152:Z4dsfmbwyjoNYOhqdMaDQREx9XItpw1nvoZIt4z2jdDRFx6h8:A2dh2MQyC94tgnAe40dFMh8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775105725, "uuid": "ad018afc-fc17-4094-8fce-66881e3f100d", "value": 2437728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775105725, "uuid": "3a0a0b66-11cf-4640-833d-5e7018772df1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9d4506d-2e59-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775109913, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775109913, "uuid": "be2f59cb-02f4-479a-af50-6f3353c81ce4", "comment": "Malware payload (Mirai)", "value": "4412ca9a83ce69bc2544f5e70fe6c92b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775109913, "uuid": "3c4c6710-3c0f-42a3-b30e-0975905a775e", "comment": "Malware payload (Mirai)", "value": "49f04a1e271194e9c68ed8251f5235ffc7dda72b902daa9d83a16a03285b9dfb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775109913, "uuid": "a6c465ff-1b52-4a90-8b56-f33b9b38d952", "value": "T19B042945EA404B13C0D627B9F6DF42453333AB9497EB73069528ABB43F8679E4F22A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775109913, "uuid": "2a1a1a71-ffe1-49c0-8898-f516ac8bd7f8", "value": "3072:OLe6vhWZQIvuCeeuaMuTuRez43IVIL5ZQy38YhTfYo+M/RgDlplLn:ee6vhtIv1ruaMuTuReErL5738+x+M/Ro", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775109913, "uuid": "2d562b08-91a6-459a-b1dd-a624b6d79925", "value": 181474, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775109913, "uuid": "731407ae-78c9-415b-bc8c-55b7de8e2790", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775110459, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775110459, "uuid": "76e9ec42-4470-4a09-b880-8fbc7c77f745", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775110459, "uuid": "12bb8b6d-71dd-4b90-af49-4e3c5f9f1a64", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775110459, "uuid": "ac663f57-6426-4a26-9e33-79e17ac409ac", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775110459, "uuid": "ddc4f99a-e88f-4ba7-a657-3a11f6b8f4bc", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775110459, "uuid": "75c249c8-8cdb-4840-9453-f79d17f354a7", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b51dccf-2e5c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775110936, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775110936, "uuid": "d485baac-0ef4-4105-8dbf-80d32dcd4fc6", "comment": "Malware payload (Mirai)", "value": "3218973b9a6fd2376a2998da650be1bd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775110936, "uuid": "d4fa3c45-b37d-4251-9f86-f616ddc5237f", "comment": "Malware payload (Mirai)", "value": "d767060b7b8f808367f3f0eb2f5fdf59143c057a09f0fb8e5d9ca8414d061158", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775110936, "uuid": "0b457434-e9ae-4aaf-87f1-101d4ce2a8ea", "value": "T10EF30945BC918F26C6D622BBFB5E028D372617A8D3EE3103DD255F25378A95B0E372", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775110936, "uuid": "5a5c6727-fb2c-482f-bd32-678376992696", "value": "3072:zrMr/q3J46RU6RqdVjqtMWrMLQT4+Ppb+a0mLk3Wa77:zIrkTEHgzH4za0d3Wa/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775110936, "uuid": "d3923120-af6d-4dd6-88b5-42c7d21020d0", "value": 162560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775110936, "uuid": "74c53e13-2541-47ff-a4b0-9d9af8ea4c2b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4dcdeb69-2e5c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775110940, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775110940, "uuid": "105ddac5-bec3-456d-8d78-e6b192bfe0e4", "comment": "Malware payload (Mirai)", "value": "061aeca52caf72fed4587f4bffbfe959", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775110940, "uuid": "f710f9c3-8874-40a5-b3e1-6d7cb4cc6b01", "comment": "Malware payload (Mirai)", "value": "159c73d8e746064ba1187265ac47ac3bdd35642275c68a10d8fe45722652d336", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775110940, "uuid": "6959c873-3afe-44a5-a862-7207e3755e29", "value": "T134F31A45BC918F27CAD622BBFB5E428D332617A8D3EE71029D255F2537CA85B0D372", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775110940, "uuid": "19435a7d-e569-4909-bcf2-f496d3ce6920", "value": "3072:rVZkrfIxfnYL90Mwv9LF4HRH/n9TIXc7:rjTfa0fVLF4xH/ZIXm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775110940, "uuid": "0ed05c54-5bfe-4040-8de5-3be985f4fe92", "value": 170752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775110940, "uuid": "79b9a8da-fbe1-4a95-b5cd-3d8cc0f514d5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4de46273-2e5c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775110940, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775110940, "uuid": "9b34d5d5-995f-4389-a00e-fed290b1cb0f", "comment": "Malware payload (Mirai)", "value": "61c46b430e097c13bba95d2f16ae2544", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775110940, "uuid": "2519531d-744a-4af2-be59-bfaff43035d6", "comment": "Malware payload (Mirai)", "value": "3d83173d1a4cd927066a324926b4f5001f2e98825c480de180b6f9eb492cacfe", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775110940, "uuid": "c8b799df-0bb1-4920-8e54-9c653742a238", "value": "T1D3041946F8819B15D5D112BAFF1E528E33131B7CE3DE72029D246F247BCA86B0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775110940, "uuid": "a85103f6-c1ea-42eb-8b91-e4d2a2bca57b", "value": "3072:ACbd1A3Tcm6Vmym3HCbuVF3jXbNfuG0tea+TTc1EVhfMBC6y:Aiecm6V7m3HtV5XbN2PcaSwyfMBCx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775110940, "uuid": "19117dfc-869c-4c11-9102-6337a4224966", "value": 180956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775110940, "uuid": "425e2576-93ee-4e8d-bf52-c34a5705d70e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3bb5ba53-2e75-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775121647, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775121647, "uuid": "c2cc29d5-7e1a-457d-904f-f0d278a65902", "comment": "Malware payload", "value": "33c9aa859abb3160897f14ba275a7357", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775121647, "uuid": "0b4d01bf-7575-4d5e-9336-b6b6e783a60e", "comment": "Malware payload", "value": "14c1715103afe9b30434a838d8f79875e7cb466c367b4b7caecec0e2aa6188f8", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775121647, "uuid": "4deec876-1861-4960-b579-86781a9389fd", "value": "T14DC34D544DBF84B2CBBA6478835BEC83D6D5E15F684EC42976AF9B80EF3600991713", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775121647, "uuid": "a81a5eda-d012-4c6d-9d27-42a70b8a20c2", "value": "768:YjZ+6oQoa4yNc/CkM2ftczSHyukzxE8Mbyvnsba5f8jUTN5wvFp6AvvdIIGD+Dpm:Y86oQoBf+zkjUsRdITCemo+2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775121647, "uuid": "8ae81af3-bac9-4fee-8bb3-acd6384ae8ad", "value": 129744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775121647, "uuid": "dfdf6acc-2280-4d56-bee6-89964da19083", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54e2bbb2-2e76-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775122119, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775122119, "uuid": "c4dc5c6e-d149-45b8-bb89-f1da8dd8d9b3", "comment": "Malware payload (Mirai)", "value": "b1fce9132404e7e8dac5e559af8e3feb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775122119, "uuid": "ee24bebd-4ef0-40bb-8fc7-aa70b499e714", "comment": "Malware payload (Mirai)", "value": "37a85dfc3f11a29ef6097819ab914eabbf08e4509cb48e19a5d803611060607b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775122119, "uuid": "a34c1632-ba17-4d16-ab93-3ba16dd0b58c", "value": "T13A53E846B9829E11C5C8077BFE1E118D33137798D3DEB222DE116F11BBCA56B0A7B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775122119, "uuid": "9b0de8e6-563e-4f29-8bd4-065893385b0c", "value": "1536:wRn78zEyaRDCvEsDCbscC6msIrqrrYmPOIRiM/3qFsIwbZnE:aSEJDCv7SscYrs/3qFsIwbZnE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775122119, "uuid": "64280073-7b60-48ac-9165-193b9f653ecb", "value": 62640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775122119, "uuid": "412cd8e3-4fa0-4318-9695-1d0a4b79aa5e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57065ff5-2e78-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775122981, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775122981, "uuid": "f1726994-c2ff-493f-a6d1-5e1914627933", "comment": "Malware payload", "value": "e8c3a3d6572080f4730743b42ceabb8b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775122981, "uuid": "4b292098-82ae-4e08-9603-9f001fa74e54", "comment": "Malware payload", "value": "f7e1066514657cc14fd0707fe400becfd6e9548f0f2d8b021b61c46cc22bcf98", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775122981, "uuid": "3ba9b258-beee-42a2-8cf5-6182f50a5dba", "value": "T1ED34F104A474987C4C327B7AB8A43A30E70DE761A33452848D9ED356F793F5EB45EA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775122981, "uuid": "85e08b43-bcc0-496c-967a-1b41d7fc1ce2", "value": "6144:JBozKFsZi3UOsoJVPO8WPEOMh9rQukUtI1:ozGEyPO8FXi1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775122981, "uuid": "34f21202-956c-4650-8935-82edf91f9a7a", "value": 247887, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775122981, "uuid": "cb6ac763-056a-4173-a1b6-e471ee8a8675", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a362427d-2e7a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775123968, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775123968, "uuid": "5c22b85b-efd9-4cc4-a709-7ce19668ddbb", "comment": "Malware payload", "value": "d251b83f8b12b05f1fdf35691706e31f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775123968, "uuid": "8796b992-e267-437d-b453-25b9650fa805", "comment": "Malware payload", "value": "434b41c486ecab506f5ce42cfef0dbbd484c7e7c7c45ac6ecf97b5244798861e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775123968, "uuid": "204bf35f-219c-4f96-b7eb-3a63814e8e1b", "value": "T103C022468210814ECFAC26A6D1486B31000B002B1AC03CCA2AC8DA202045A4B624C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775123968, "uuid": "59809996-881d-4766-af86-65a1bae80c52", "value": "3:YWADjhdHNAEJRNHqHFCyLyjTwIWEWHWyf3u4fIX/bQLsCoHs1zR2bXdx+:YWAjygRNKYFjkIiHsZPbBoR2zdx+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775123968, "uuid": "ca366323-9d68-453b-a3cc-8636a06a1a48", "value": 189, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775123968, "uuid": "11ec224d-e557-4391-a006-96c2cf651aef", "value": "application/json", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c9d13df-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775124789, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124789, "uuid": "3299b94e-f7f2-4f9e-95dc-6cf721fafb81", "comment": "Malware payload (Mirai)", "value": "0991addb083ce49d069212befdb2cffd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124789, "uuid": "64ddc1d4-471f-4200-b98b-0f892270937c", "comment": "Malware payload (Mirai)", "value": "5186c9f224236fcd06a7e44e54836cdc3766e0c943b6c280fb5f57fdca1a5ac7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124789, "uuid": "f313903a-9d48-412f-bee7-2dffd67fb460", "value": "T10863F985BC818A11C9D813BAF92E118E33136778E2DF7222DD116F1077CA96B0E7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124789, "uuid": "da34d614-e8ec-4f6a-a5ae-09118b2f9f56", "value": "1536:Z/nv/KM+DUhuioTmDSbgqWeILZc30zmI2YixQX+Ks:Z/KM3Mi0mDGgKI+QX+Ks", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775124789, "uuid": "f436e264-c413-44c9-8c87-8b9e80f0d6f4", "value": 67228, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124789, "uuid": "e6826861-3a54-4f1d-a21a-abbe0b371fe7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f401414-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775124793, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124793, "uuid": "562b6882-c4da-4d1f-904e-aec097666e0e", "comment": "Malware payload (Mirai)", "value": "173c708a0dce62b59597aebc81fae5a3", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124793, "uuid": "fe16fdc5-7ee4-4b37-aea8-aacd8d18b54b", "comment": "Malware payload (Mirai)", "value": "0d2cb19d3edbc84bb321695479263f8dca95f3666a5c085efc6760f3ebc39326", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124793, "uuid": "48ae3d51-bb3b-4770-ad48-50baee67de16", "value": "T1D9935C13B9C480FCC849C13087AFB536D963F17E1279B29B73D4EA127E8DE511E6A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124793, "uuid": "1ce22bc1-ff4c-4db2-a969-b74cdef60a63", "value": "1536:yc50J45j1WS60TzxMyQk8TCzyRgQQ1h1Ms6fuftHHZlmpnahB:vf5j1W0TzxV8QyR+1h1Ms6feHHXmQT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775124793, "uuid": "cf88998e-9625-49d5-b107-0812612686cd", "value": 88928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124793, "uuid": "27102faf-2405-4c57-a008-acf35dec531f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92f4e07c-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775124800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "adc31027-cc5d-48c1-a23c-a412b72faaa8", "comment": "Malware payload (Mirai)", "value": "b004fc932e63720c8fb74d5b2974ff74", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "cc85a82a-51f9-4f90-8202-0e53cb70457c", "comment": "Malware payload (Mirai)", "value": "8108f37ecb81c14d47d741bdc98f3b4c008c69eab0352d52f9804724663886e6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "d3cfd074-e923-4f6e-a7da-112987bb687f", "value": "T1AA533AC8E947E6F5DD0B4C780057F23F4F31A265C568EDD6CF9A1E06EC93861900A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "844f9910-8e88-41fa-ae7d-7f7152186684", "value": "1536:uBEdkpH8KkZmeXqQ2aPC7aKMTc+s+rUQhj931k5XH1O:C3pcKkZmeXu/aKMXxhjfcl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775124800, "uuid": "5e29ee15-8b21-41f3-ac47-fd92a562b9cc", "value": 64260, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "e09ad89a-f120-458a-85fc-d84a6739c397", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93021159-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775124800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "008b8f0c-3265-4db8-902a-b971526c2ea6", "comment": "Malware payload (Mirai)", "value": "99750e2ee333a74d860f94cf5a727f7f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "4769bd6c-93eb-4626-99a2-436152ec30ce", "comment": "Malware payload (Mirai)", "value": "645d2fc37a391a513e4fc2cf41fb00aa196c9365f5e18fc1301366c9abc4663f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "e40b8c65-480d-4e55-9aae-6c5d21b52117", "value": "T149B39E8BF6075A90CC2187F80BCB5BDD3A233212AF6788E77C1E253D59781DE4A067", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "8c4226ab-6db7-4ee7-95c4-97e0ebc17b6c", "value": "1536:JDrdsl9QUBAf6HGwdQJAwbsZYae4aJ4gP/LW:lrdslpp9gLbrataJ4gPq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775124800, "uuid": "d5e95199-0c17-4176-8ebf-939b09f6077c", "value": 108172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "06ad1155-0798-4fed-af3c-b46d02439b1a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93081922-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775124800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "6c8173af-caa0-42f1-b691-5d2b635d0304", "comment": "Malware payload (Mirai)", "value": "9837f5cc883b09014a5094f079cd497f", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "7e63d0c4-a1d1-4988-b7e9-848d2edf1589", "comment": "Malware payload (Mirai)", "value": "ef6a8cef23056da7bc68c5337a291d6427a66edaf3a4561e6d0ae798bf458c64", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "b2871396-bdac-415f-883e-42595dfd6170", "value": "T1EB933952FD818662C6C126B7FB5E028D376613A9E2EE3203EC256F2133C795B0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "9450886a-cca7-473e-b74d-17a1e877edde", "value": "1536:Gd46YWRpzEaVstYJlWtjlItx2Bq79bwFJc7Bf9h+eJCQsiEzjJ:Gd46Y6pzEaZeS2BY94c7kCCQlk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775124800, "uuid": "d32e62f4-4262-4daa-82b4-8e998ff4b4c0", "value": 89852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "92bdb289-17a2-4778-8137-b713b9e4fb15", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "930e5a88-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775124800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "bd6fea7e-b4a0-4d9f-a668-c0b02e7b1fd3", "comment": "Malware payload (Mirai)", "value": "d94ff792bb63bcf5e7b881e6d18c885b", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "93dc0195-993b-42c4-876e-f7a21977ff89", "comment": "Malware payload (Mirai)", "value": "255d5d2364463b66f6682e0062273376bfd53edb192547c68466f47565da19eb", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "41430f9b-9981-467b-832e-29d5e5e9763e", "value": "T1F9C3AEC3FA8714A1C46206F103C71BAD6F93A221CE5FE4E7AC1DB63B5A7A4DB15163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "2a8784ca-c67f-43dd-9b76-22aa4ef136ab", "value": "1536:qrMjtT/2h9gqbLjVfAXEAlWuoPVkfFELl5gx1chxs55xgRCE3/LWG:qrWT/i9kXEqn+CFELwx1cMgdq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775124800, "uuid": "a39d708e-0d03-4732-a2aa-1254dad57774", "value": 124676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "8836c372-d167-46c6-b872-26aa96872dec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93187ef1-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775124800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "d1fb2a92-aed9-49cf-bee8-3ee2c376c772", "comment": "Malware payload (Mirai)", "value": "d11c8a0c076401d9b255671eb31d0003", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "9e11d21a-a831-4271-997f-9e6cd54fae13", "comment": "Malware payload (Mirai)", "value": "483ca942ed5a4c55ea812950ef0aa48f9844a303b7b1240fa1468d340c93e768", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "73089266-4420-47ad-9b2b-a99a039318df", "value": "T114635C61A6751F27C0D0E57EA1F74766F2FA070E14A8CA1F3E620D8EAF2456032576", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "bb48d328-d60b-4188-8c30-65bfd3c37200", "value": "1536:ImJOCwKOaMZ9jxZzh0mvg+EuvOWqbtYSBr:ImAC4BEDbfN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775124800, "uuid": "92fcabf4-945d-49e7-8de3-86f392ff4953", "value": 71464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "d41ff827-4c84-4ed1-9b73-1337be5f096d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "931994bb-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775124800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "6dc1c9c8-e893-4ce4-966c-e74fcdef14af", "comment": "Malware payload (Mirai)", "value": "8a099fbeb4eaf46336123841999b47f8", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "5efc9d01-b824-4852-9d82-d6db11a09ee7", "comment": "Malware payload (Mirai)", "value": "58f1158fc19f60eb48009af7a9398042ad8a61f091a84fea72ffa0ed28e5968d", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "7b899706-f0df-4f32-90f8-c7efed889e32", "value": "T199839B23C9361DA8D84804B0B0B48F755BA3E515C4672EF7599AC63AD483EDCF6863", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "f79e2db6-bb22-4226-ac76-7d115b91f1bd", "value": "1536:axD+xE86+GZal4XhbFKxvCgF+HRCaWl5WQHyn:al+xsZ8q1Mxz+HRE4n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775124800, "uuid": "22159874-2988-486f-8bdc-3356d3c80414", "value": 83812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "dce2fac1-7f17-45c2-993b-1cb21a09db73", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "931a3deb-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775124800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "3fcfedc2-b91e-42d0-8175-045c3d1bbe56", "comment": "Malware payload (Mirai)", "value": "7c7143981bd8c9cc0b2138cd48da50f0", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "78ab7bbb-b326-49e5-9331-4f9d7e915658", "comment": "Malware payload (Mirai)", "value": "a64b89f5c5b128af2e9511b8884cef3d416baf44448e8afb286b2fc2a07cd5e7", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "23f51417-8284-497e-9e29-34293fa3a337", "value": "T1D9935C42B70C0B43E0575DF03A3F57E1C3AA66A120F8FA89790EDA4596B2E325547E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "fa19e05d-8c02-4c84-bfaa-25f6acee7828", "value": "1536:6hSlTzh8nuVu2NMq1B+z6Xls0kyb6d6TXNfGwT1nmIKGMX0l1WrFlfTAOFlZ:LKq1B5TXhGyKGMKWr39Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775124800, "uuid": "53fbb018-cc60-4b2c-acc5-05020efb02ba", "value": 92048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "caed3f58-4217-4061-aa87-9cbefd252396", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "931ad49a-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775124800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "23b8c92c-058c-47d5-834e-b857f6432451", "comment": "Malware payload (Mirai)", "value": "924962907481c24046f5aedd5aa08286", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "2bb8218a-aed9-4193-bf90-f391068078bd", "comment": "Malware payload (Mirai)", "value": "91ffec6d9e24ed26bb502c531f1ac24035eeb11997ba13c960d45dcac465c32a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "cc59c606-090f-41ca-b567-5f7832b24cf9", "value": "T1D6436CB6D82C5FD8C4086DF4A9788F7C1B73F10A80932EB26B46C5A9148BD9CF544B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "7bfee81f-93b9-4952-bd84-a671b9d80d3b", "value": "768:sXb6IdwbDXq5AkfRxe6FJUgxtHPUuqgRq7T9:sXRibzq5AkTJxtHPDqgRy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775124800, "uuid": "1b229793-a0b0-41e6-97fc-ab1e8fe540d4", "value": 58808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "7a0af853-ae62-4ec7-93ef-7e39aa880977", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "931b0095-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775124800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "3d3eb955-aade-49e4-b3a6-4fc56b0e7981", "comment": "Malware payload (Mirai)", "value": "86ffab0e015e29077f162787b7d3f408", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "aba5c8d5-7e47-443b-bda1-05efb4a98f4d", "comment": "Malware payload (Mirai)", "value": "f590872fa139fcb92eafbe13fadbcb5362d5e59420586f35d0d3cf6609f5efff", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "82353b41-ac33-4c35-9093-cfd8dd59260e", "value": "T1548328C2BA4BC0F5D90748304067F33FCB32D6394061D66EEFAA9E65DE7364252262", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "0ee33198-8442-4f57-9882-d59782355cb1", "value": "1536:8l8IhK59kLMSbHh7znWAcanWC8f4TxdgoXF6hKql9:8/hU9ktbpnWnfgTxddXcl9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775124800, "uuid": "4f05ba25-6b88-4494-84b0-af09009351e7", "value": 87696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "2537f5ed-a010-4d58-aa0d-1fa60e2fb211", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9322673e-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775124800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "d34b3f63-6225-49f7-99e2-b9e5a376c22d", "comment": "Malware payload (Mirai)", "value": "99b03d81af5af050cbfc0723eac38359", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "fb38ab20-8ef7-4881-a711-703c62c47af5", "comment": "Malware payload (Mirai)", "value": "5a11d08ab62f97ead0f6a5137563e71dd60955a8b1968854c3845448eb282e29", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "93d301ce-91c0-4f59-97aa-25156d507bb1", "value": "T18D932852FD814622C6D116B7FB5E028E372713A8E2EE72039C155F2137CB96B0EBB5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "66d1d17e-86f3-4d0f-b2ce-222e5b239e01", "value": "1536:EFdsDRtW3FiCVvEwJUIPdAcFj94BVVLAMCWPr1o/T7vX+oTJ:EFdYc3FiYDdAcV2TVL7p4TTJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775124800, "uuid": "e5ffeab2-6aaf-491e-8404-ceeecc595742", "value": 93364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "f7010d8a-c318-4c3d-9370-e920788efed9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93236049-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775124800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "0db36463-4501-47c3-9089-c347aee41c8f", "comment": "Malware payload (Mirai)", "value": "b8cfecd7a5fa2ec03113038c55820cad", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "5aa77565-b76a-46fc-b843-1aa72c1fedd8", "comment": "Malware payload (Mirai)", "value": "e3637f0db2bd19be2eecbe94ff4ff34e35bce8a4d2f3325c0eabac2811fd47bc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "78b99788-c43d-4598-aec1-c81fad071b90", "value": "T19383C716BF650FF7EC1EDD3B45A8170625CCA50A22AA6B363538DC1CF54B24B46E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "9f9c15ec-fd29-46dc-bdaf-4ac447e7892a", "value": "1536:pk7eNroj9ckBc9ia4JZPLq/WlCLmL3Rcz6/5s6L3/EKgZBTGG:plNroj9cIcka4JdLq+9L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775124800, "uuid": "b75ce40f-7379-4b46-8f46-da36e99f2e50", "value": 86208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "032762eb-7365-4689-afe4-8017eae7b205", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93244e0f-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775124800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "a8745544-55cf-41c4-918e-40323f868599", "comment": "Malware payload (Mirai)", "value": "9072e5be7fdd82aad6770a8db2efc312", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "b5725e5d-0528-4de4-8bdf-cd26bbbb1fd5", "comment": "Malware payload (Mirai)", "value": "f4d2cb8b8ff03d8a29cbfd94cf862b69a84cc9f62d0ea9fb57f925b86685c2ef", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "e7a0200a-1a1e-43c2-8d28-9dded5046c3a", "value": "T1A9C3E909AB614FFBE86FCD3746E90B0529CC551722B83B7A3574D828F64B54B4AE38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "e361a646-2b1c-408f-b461-b6e6f8845b1c", "value": "1536:htJ6cGVoxBFf+g6z3jLH514RX6bP+Y0+YdW0OKhR6wppsWZ5uRrKnre2F1Volykt:TJ6cGVoJ6Tne/6wQWCZ72bWliUN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775124800, "uuid": "2260d2be-bed8-4ab2-894e-b9ab2984e8ec", "value": 122496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "2a1ac910-6386-48eb-8bd8-cbbfe5cab6a4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93264410-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775124800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "d5128807-c989-486f-b21b-0cbccad76d0b", "comment": "Malware payload (Mirai)", "value": "692e85469f0e3781e93fd1d460963c8f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "81ec27f1-04ab-4b3c-ac5c-61dddc3e1860", "comment": "Malware payload (Mirai)", "value": "0d0c3335d2e29a6b7d121727fe015d53ab8179c4fc0930e7ee5d7f899199a8c1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "b5aacfb8-d663-4b8d-87a8-749a28b92adc", "value": "T1DD632986B9828A53C6D423FBF62D01CD332663A8E1DF3252AD122F5137C682B0D7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "9501a9b2-38cc-403c-a1c8-786e005685bf", "value": "1536:9BB4qBH2nQVQf/OzQok/lF6dcEAm1ZrQh2F6+HZAY:9BFBH2QSf/OkoIF5mvsh2F6+HZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775124800, "uuid": "24ee97c3-1aec-4283-a42d-5f3b4aa577a2", "value": 67004, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "5235fcce-1e57-4198-9c09-d43aec620966", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "932d52c0-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775124800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "9d17bcdf-e68d-4603-aab9-679b225ecd39", "comment": "Malware payload (Mirai)", "value": "e8c415b4cc959b16c98bb53aa58d4ad3", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "6ddae7d0-1129-4dec-b857-91cab68d98b7", "comment": "Malware payload (Mirai)", "value": "12ead33440cbf019a3731d09bbdb9de0fb97316323d3758a12ab9caa69eee154", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "a5c8215a-ff35-46b1-b30a-87dc2fedeeed", "value": "T109432C95FC9245A9C7C117BA771A968A336263A9C2CF7313CC0C0B5176C9A4F4E6BB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "dde9d44a-f74c-4bb5-8a03-6b07c7237279", "value": "768:cVgcik7nohvan+Ybl8dGsf/eMZr5IrdJKZ6n43767oM72F30nIz3:cVgcikav67ekgecNIrdJKZ63o0O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775124800, "uuid": "dc2e8f34-1d37-4797-9b13-f9f686eaa7a3", "value": 55344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "910c2e66-35ce-4581-9190-0d474438c05b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "932db9bd-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775124800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "132e1bff-468d-4ee5-bc57-0dc94ec25c6c", "comment": "Malware payload (Mirai)", "value": "bf2ec66c960f14fe2089f35b42bb4854", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "7862a98b-ffe5-4943-bee6-047e4a81055b", "comment": "Malware payload (Mirai)", "value": "48d2f14841dd0d8ca049ae1739fd06a7af7629569afde82cfaff8ca41a8e22b6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "31d2d1c1-7256-4884-8b7b-790cb74b3370", "value": "T16E333BC9AA13D6F0DA160AB0207BFF361677F13B3219DCE7D7A8A963BD4278190051", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "f4131d1b-dc66-47f8-9fa8-52e9e1a5ae0d", "value": "768:kWMYMbrmzvsIr+U+yQcJcxo/yZlGyZiKVhWHpMWU9hvUG:kC0rAUIzwcSUyZlGyTWb4hvU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775124800, "uuid": "96869dae-2a57-4c4c-84aa-bb7fc5a1f161", "value": 54736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "e2cfece5-4301-4af4-8703-5bce82d6fc04", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93476ec1-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775124800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "b4613ef2-f1aa-4a95-a901-b2949add7068", "comment": "Malware payload (Mirai)", "value": "964af313c2b05d19abbff4996c02866a", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "a77fd800-512a-4834-9347-cd24464470a2", "comment": "Malware payload (Mirai)", "value": "96287c6c40b8806dce675dc2d1773ddccbdd9e6709374bd6e48f4b9fe2ed0b27", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "a1026de2-1558-4338-8632-1db4c6355613", "value": "T1F3935D02B70C0E43D1675DF02A3F27D1D3EEA5E121F4FA88691F9A8591B2E325586F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "91d7a37d-251a-4c71-877d-730b537078c7", "value": "1536:pcBZli/TwLrLXyUiQI0tdpDjnPqGD0M39+KBAnKE0BJWtMGXyC/T0QLlfB15:2Li/T+hPbTpAnWiMNC9d5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775124800, "uuid": "09505199-3569-40d1-81d0-d589ab198fd8", "value": 92048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "4bfe4229-147c-4fb0-ada7-aabf9069e6ff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93479ce2-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775124800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "87feccb9-002a-4500-9044-85f0608fb361", "comment": "Malware payload (Mirai)", "value": "446af28456c7b21fa1e5716c02e73178", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "fa4c9f25-2924-4ebb-884e-56488fa3253c", "comment": "Malware payload (Mirai)", "value": "c9b26587fce571edf1f08903ac33ff8551778002272a95d85aeab28f3cd849b6", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "16736b6c-89c3-422a-85ec-90db656d9442", "value": "T17D332912997C1A2BC4D0A77710A38363E2F72B954194EA4FBD750D4FEE983501ABB6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "c10c6776-c679-4f7b-ad8c-07b227bc6674", "value": "1536:4b34LHJRwGYtJLx1TBH4EmgSXUwXyqVNS:4LaQqUj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775124800, "uuid": "e3ef9dee-3e29-4fdb-a97d-480db8344fe2", "value": 53812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "3b9d3844-4cb1-4503-adfa-e86c00ba5269", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9348944e-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775124800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "dd1c78af-18c6-4fd1-9680-7e92907f26c9", "comment": "Malware payload (Mirai)", "value": "27eae7f5f1a3ba47a20495e314b07178", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "ef94b3b2-424c-4387-bacf-2f4cb144153b", "comment": "Malware payload (Mirai)", "value": "867f65c80da50d56351e70941935ba9eace1550ab862d7b16817e701446b1c40", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "aed23892-7330-4615-b494-e37faf858108", "value": "T158433D96FC924569C7C117BA771A978A336263A9C2CF7313CC0C0B5176C9A4F4E6BB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "636c72f5-de17-4477-88c2-ae7f701714e9", "value": "768:cZVgcik7nohvan+Ybl8dGsf/eMZr5Ir9JKZ6n43767oM72F30nIz3:cZVgcikav67ekgecNIr9JKZ63o0O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775124800, "uuid": "0c03b2b9-231e-4c3e-b973-698f92d1556e", "value": 55344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "c6532e97-e1cf-4c66-aed5-a8ced9c09d07", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "934bde60-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775124800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "fdaa0a07-473f-427f-8377-a3b92b8cffe3", "comment": "Malware payload (Mirai)", "value": "a15d6e6a5469cda7f9d5cba92a09207e", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "4b164a5d-3c47-4f46-872e-f3983869a094", "comment": "Malware payload (Mirai)", "value": "e79bce3e2cae2cea2a701e3eb11e8adcbe268173251dc4717ea2ff1e3affe737", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "e55f349d-9008-440b-b701-7e89ca74747c", "value": "T146C3C74E6F218F7DF368863047B38B21A75933D626E1D685E2ACD6005F7034E245FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "d6c21872-a47e-4fa3-81f6-788c429656dc", "value": "1536:o8cT1Lkgwe4eSZjkap6Ijj/Cr0ubgpa5KT4qLHR8hXVPe67c529tplSM:o31LPwvJkCPeS4qLHkXVh95F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775124800, "uuid": "491e928c-8d91-4d64-acb4-e7b154409f29", "value": 118400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "bc1af678-6d85-4930-ad85-d9d4cc7ac1e9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "934c0e3f-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775124800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "d59c4c5c-aa62-4c32-acae-0a8ca84ce023", "comment": "Malware payload", "value": "07366fb8583444911b80898c46a45703", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "6db91184-8d98-47e9-8e13-7376506a4240", "comment": "Malware payload", "value": "d4508bda632b5eb652735bdeddd6e444d69659baf3051e8121bceed0a1765835", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "9400f82f-4553-43cf-b653-35e96e6805bb", "value": "T180936C85FB83E1F4D94609B011ABF7798A31DD322024DD6BEB98FE72BC31612911A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "f1eddbcc-3a1a-441f-90f8-2447efc1aa42", "value": "1536:hqj89KwF8ROXbDzcj02/1Hj82aRqoqRpUQ31QUHLKVyMyFnr:64F8ROL/cj02/1HYdUuiE5yZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775124800, "uuid": "4653720b-9f48-4a98-a7d3-9ae7ee33f162", "value": 95476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "787bfae0-7cc1-4668-89c2-79bf8302d282", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "935002ea-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775124800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "32aadba4-4eb5-4782-ad6d-5e2573e2a2eb", "comment": "Malware payload (Mirai)", "value": "c558d12d5158779a8abb3a3804409804", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "a36c2655-f3bd-4b4d-9812-0b633a845f51", "comment": "Malware payload (Mirai)", "value": "4f10d73baf67716fabc2fe86b8d603523b70f716fc19d77af3e040870b148072", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "f3cc7b4d-70d5-47c1-bd85-93efee762b6f", "value": "T185836CC6FB43D4F4E8120971217BE7318A73E53D502AEE83C769A872BD12541E75A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "0fd31c65-9c28-416a-8e70-ab4c36190a24", "value": "1536:4NGfle9cPS43Sy6QYXVE143RrFUCeWtsrswWdZ6:4cEWS2Sy6QY6143RhUCeAsz7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775124800, "uuid": "0e2164cb-fa9b-4d31-9851-4ceeb058488b", "value": 83600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "b7042b0e-6a2c-4b08-b499-103fa01969a9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "935287e4-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775124800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "06f28697-a9bb-41aa-b8af-7f3c5c8134cc", "comment": "Malware payload (Mirai)", "value": "63fb72e2d1cc5a147ceea0d35962fd4c", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "5a75a99c-9f38-4235-8d24-f57b0a729fa6", "comment": "Malware payload (Mirai)", "value": "207df8bd9aeb27d73e67f4219d8ac9694f81ab8440dbd9a2d8214a34a85a8e0c", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "4134e0f9-1c9f-4b70-b3e1-ca89570c24e1", "value": "T1BAA338D7B401DDBDF84EDA7B4053490AB130E3620A831F36626BB967FD351981927F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "1388b80c-024b-4754-b597-4f0f861ef7a4", "value": "1536:QszQ1QMf9sBikTlnCpONBjk4nwlHt6C8n3aH7IH6J3KSp56Kn7S1U4vqr4KXm:QZswkJnCpkW+wlHt6ad3KQ5Zcvqr4Am", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775124800, "uuid": "201b2ad4-58e1-4c53-ab0d-28fd13b423f0", "value": 99852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "5a3dfb72-789a-4ed5-b334-f893a4ed9c90", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "935e4411-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775124800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "2f9e6ac0-f286-4b8b-ab70-b23c9a500537", "comment": "Malware payload (Mirai)", "value": "d05cf7f37d33ee9fa267e51ac11f37c0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "f83e094d-b1b5-4a89-9484-1c1c06fcf2df", "comment": "Malware payload (Mirai)", "value": "ae164e666d4752c40f28d0a75adf03cc16e9123ce965fd60d7267745405f76a6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "87c6522f-6915-4db1-87eb-0943325be7e6", "value": "T13283D70A6E218FACF799833087F74E21975C33A626E1C685D25CD9042EB474E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "403b0929-9eaa-4ffe-8b97-0fc1a4bd4908", "value": "1536:Hyxqx2cPKBhhTCU47V0/tdtyj/zDL/ukaHu:Hy22uKBmUDtybBt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775124800, "uuid": "143abe4d-eac4-47d8-8262-6160784f04b8", "value": 84352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124800, "uuid": "6e4b347a-84ae-4265-a2c2-e8edf6544e82", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93820be7-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775124801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124801, "uuid": "4fd9e022-aaa7-4baf-a4e9-9c50256b7e8e", "comment": "Malware payload (Mirai)", "value": "c1a33d00a1fe9e55dedb621088133def", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124801, "uuid": "2779a005-83cb-43d9-af78-745662c58af2", "comment": "Malware payload (Mirai)", "value": "b32f8bbfb58c14f3a5cc8ccb48ce6382d0f056c483ebf10613bd6b6c7c339ad4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124801, "uuid": "97a60858-c41b-4e0f-abe5-7aaf9de91f28", "value": "T1F6437DC4A19BEAF5EC06173420B2F3776632F87F315CE947D39A6E63BE0664094062", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124801, "uuid": "c8a8132a-7d08-442c-ae1b-e0b6d604d05f", "value": "768:XB+c+qkuSwcd1Gwfk4TwRyGchMfWFT7Bx9Z0Sf1ZBk1jvjQUitkyUxBWiA4P:Xh+TuS9cnXchP7v9ySdZBk1L6sBW0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775124801, "uuid": "ba210f9c-2bfc-4904-87d3-1aa26e535e7b", "value": 60164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124801, "uuid": "d0b7ca6d-a8ec-402f-a1e7-e733d89fee02", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93b32918-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775124801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124801, "uuid": "6cd80c90-3059-4651-a7ba-1281cb4926c2", "comment": "Malware payload (Mirai)", "value": "4927ef7a8f28c2c89ffdad3f79396031", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124801, "uuid": "7ef9a263-d665-466e-a96b-0f4398c11ffe", "comment": "Malware payload (Mirai)", "value": "eb594c3643e6a3f402cbe04539b8526374acfe261e7a150a48ed3d5d7f4ec655", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124801, "uuid": "88dc4bbe-8eb0-47ff-89e4-636b10b5a3f4", "value": "T1DB630803E98981BDC499C1758B5FB13EE53B743D0239B2973785FB226D62E20CE1E9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124801, "uuid": "bb2673b1-efdd-4ba5-9637-6b8f5567fecd", "value": "1536:dp+wgroX2O8VLwI9QSoJ3IcIcUunjktdXtXJMxSQ3DQr5K4QwPbxYE:dp+wQA2tVLwKQSMYcNUunQdX6SQc/3+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775124801, "uuid": "18256235-544a-4f51-9149-ded8d9a27224", "value": 67192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124801, "uuid": "39f409c2-ad4b-4dd4-a785-eb8f36cd74a4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93b78d61-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775124801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124801, "uuid": "50688a0e-682c-40c6-afda-6fcf6e187d4d", "comment": "Malware payload (Mirai)", "value": "dbf42c622efe2117104f21fc88131687", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124801, "uuid": "0a16ec25-8ff1-4b03-abcb-b07606e0f53b", "comment": "Malware payload (Mirai)", "value": "4207fdf47060617945453e6e5a38c91a5c7740b07dfe30725f84b30369a7fb0f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124801, "uuid": "fcdb2a27-9f46-4845-a6d2-70a61bcedb53", "value": "T1BD634DC6F415DE7EF859EB7B4C524E08A272F36146830F265B9BFE57AD31148281BC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124801, "uuid": "3f826994-e763-4155-887a-e0603b21212f", "value": "1536:BiI14qrzenBRB2niaIQeuacWjcW0JcWcBLIXE7ZxpJ/80j3:BfrzenBR8IQeuacWjcW0JcWcBkXE7LDb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775124801, "uuid": "56c64f0f-c309-4f04-8404-be1a0b2ffe6e", "value": 72112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124801, "uuid": "2505d9f0-27a2-436d-9b24-f7348e8c9e65", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93f06925-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775124801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124801, "uuid": "58bdccbd-7c12-4b78-b247-45e2525f28b3", "comment": "Malware payload (Mirai)", "value": "cc1012fd06ab583b285d442fab242cf7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124801, "uuid": "8e41f6ca-7e03-40dd-b648-cb71d02d205d", "comment": "Malware payload (Mirai)", "value": "d33beeecfba29be529d7793b6bfd897d95a8c24b7d42acb49653a338b69fc05c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124801, "uuid": "0ab32327-3174-4498-a7f0-357c133da9de", "value": "T1A0533A0336280E53C8A61AB46A3F57E1D3FFAD5510E4F288270FBAD68575D31128AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124801, "uuid": "4b06303c-751a-4a68-9925-f0efe8aa882b", "value": "768:/A9A/Jp62pzxA1hTLUXpnCeWZBifCjCHIz0e1Yqz42w1yUKi6PKTmiRDlKqzJSLu:ugpzxAH3UX0eWZBgCOyYii6ERDlKqcpI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775124801, "uuid": "82578397-4916-4403-bc55-55dab8a4379e", "value": 63568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124801, "uuid": "1861b7ab-36d3-45f5-b34f-b42968749b5a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95c8ed34-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775124804, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124804, "uuid": "eb92c4d5-16e1-4bc5-bd35-3761ff82908c", "comment": "Malware payload (Mirai)", "value": "ba0e5097d41e8b8d09c9919df72c77a6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124804, "uuid": "59a0ef72-8d5c-4d17-b370-6c4c9ced27e8", "comment": "Malware payload (Mirai)", "value": "77b0b59d2733125c03a25e10bdd7b1b5629cbf80b8627c9aec61b07164d984d0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124804, "uuid": "57d755be-bfd8-4f26-9cb9-10aaaa02e8fc", "value": "T108530984B8508A43CAE535BDFE5D118C33526B79D1E97101CE04AF3526DBE8E0B7BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124804, "uuid": "8e9244b8-083c-4f3b-9ac3-49cd64a76039", "value": "1536:02MEAKRXM7+dSl7lpSbEuh06j3xQpjnzLs6OyafjOB8IuNqux:NMXKwCojSbEuTj3GjU/86TNqS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775124804, "uuid": "fd6d5376-12dc-4a84-ac52-40e2bcabad41", "value": 66564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124804, "uuid": "da84f47a-9a6e-411c-a318-bd0481c40709", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5d8fc97-2e81-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775127086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775127086, "uuid": "c7bccc21-696a-4272-988d-10aec0dfe06a", "comment": "Malware payload", "value": "e0d8f47b7b9d4b70feb3e90319c57c1b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775127086, "uuid": "c11fd5e7-ff24-40ff-b3cd-471745347c7e", "comment": "Malware payload", "value": "0d5bef16888c862b0e0177a378dd5f1a796f4606ded8054b9ffe212f9b344727", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775127086, "uuid": "2f59ec87-7a92-41b4-9282-0b9534b638c0", "value": "T1CCA3E91916670890F1EEDDC00D85B8BA1A1377B3A5E11BF967CCD64CCD16EED28C36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775127086, "uuid": "119483fa-4db2-47b7-97b3-57fae5c26437", "value": "1536:H4Xku131N6/RTVBMKJu83mPm+sezkTiBHAw06IyGbwgewyDjEYgIPLOAj1QJzqAQ:YgVBH3mPm+sqk+HAw0F5KijXxQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775127086, "uuid": "f42c86b5-fe08-4cc5-92bf-47ecb7994a82", "value": 98122, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775127086, "uuid": "a9c36476-294a-4699-92fe-2c749e4e1e65", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e2491b6-2e19-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775130441, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130441, "uuid": "84c73965-86a3-4cbd-a238-7d2e501f8605", "comment": "Malware payload (Mirai)", "value": "627d9d8e225edd9a5c0c9ca766139d22", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130441, "uuid": "b2568c11-136c-4764-a158-3c7ed830d28d", "comment": "Malware payload (Mirai)", "value": "31bbaf8e9b18430b56dfc9b8a10f9b5427f012db15ace92b4381b82513efb68d", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130441, "uuid": "f7c4e953-abb6-4705-a0d2-9251974b529d", "value": "T1A7F2F890B9420A27C5D5227AB76E5BCD37B067E9D2CFB303D8205B757A85A0B0D23F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130441, "uuid": "770cc56b-e21c-45f6-8ae5-2943d621706d", "value": "768:jHnryfqG8moTeb0hcLFSx0BxmjqdIYy6y4gbAw7:jHn/PNTeycLZxWIIYy647", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775130441, "uuid": "dc3c5054-bd8e-4a22-b9e4-26ac17a5c9ba", "value": 34564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130441, "uuid": "acafe8ef-1aea-4ed1-a360-ce39c089b89d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e7ec6d8-2e18-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775130441, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130441, "uuid": "e1f24645-679b-48a8-97eb-6dac71f51d44", "comment": "Malware payload (Mirai)", "value": "d435779e6ed05188b646b4822f433746", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130441, "uuid": "c62dac00-48c8-4c32-8388-289bbeaf775b", "comment": "Malware payload (Mirai)", "value": "661921358ddded1986e5b62293e3d6ff510fc603ebcec7a8d5ba3d3acd8f47ee", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130441, "uuid": "d4d49197-8c52-49f8-885b-6abc029edbdc", "value": "T189F2F951B8928237C1D512B9B7AF5A8E377173E8D2CBB317D82107607B8161F4E62F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130441, "uuid": "b7b16089-2dc8-4a3d-be0e-eed3f61a4ee8", "value": "768:JhLEqGKX31qBHA0G5WyO1K/0d09/acgobNw7:vSKVCfG5Wyf8m9/acG7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775130441, "uuid": "4220d68e-7ac0-45cd-96ad-8b42d90c3bd4", "value": 35980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130441, "uuid": "4a9e2592-61ca-4fa0-bb2b-ed584ca12d49", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80831532-2e14-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775130441, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130441, "uuid": "8ca6ac8c-abf5-46df-90e7-6d8b9ff64399", "comment": "Malware payload (Mirai)", "value": "c14888670d249ebae909e7f76e28ab33", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130441, "uuid": "79a05c62-0a97-4078-a6e7-d4546a648954", "comment": "Malware payload (Mirai)", "value": "2c5d22782f78bdb3485b731af0d86dd3293b7be959be1b964577fa0fecdcaecc", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130441, "uuid": "ea5e8196-fdf6-45cf-a888-fd3239489443", "value": "T1F2E2182BF0858695C083017094E74C361F17E5C18B585E7F6EE88592188BB6E7F27F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130441, "uuid": "2d763179-1cc0-4939-850a-3ab9bf523ddc", "value": "768:ZdKhKbT7ekuBYyBeh8moL4AQn4OICnw7:EK3Ra/LmoEAQ4jx7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775130441, "uuid": "0ee3f5f8-caa7-46b1-8477-725fd8fa9ca7", "value": 33116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130441, "uuid": "02be7775-59da-4c9b-9215-9a5f606b98dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8289cbb9-2e14-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775130441, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130441, "uuid": "1fc38a27-6a4a-4956-88ad-fc463ca6d0e5", "comment": "Malware payload (Mirai)", "value": "0127028501f1a927b49c5c394f597af0", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130441, "uuid": "5ffa39d8-5a6f-4135-80d7-2727429c14e2", "comment": "Malware payload (Mirai)", "value": "b6e50222ea2cecfbafccd6ec4208cc444f82db9d4dadaed6e5cb7302a690cb62", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130441, "uuid": "6f44d8bf-0994-4db4-a7fc-5d537bcffa4e", "value": "T1C1F218127ABA1B17C0D2293920AB5F9236651BC963C4D64FBE72095FBDB23002D17E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130441, "uuid": "57d0e804-b44d-4b27-ae72-495934496281", "value": "384:+WUJJlBEiH2xWFnMRV3pWbDENXTebve/ZLZZgRqHd0S3knTtXhkFPwF2U:+WfyFFneTxVT11ZZcqHd1UnVhkFPwFj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775130441, "uuid": "83b5f4e8-0687-410b-90f4-5144ab685268", "value": 34860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130441, "uuid": "f8f899f9-2a29-451e-9f38-50abc6cf8086", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "806c4c43-2e14-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775130441, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130441, "uuid": "66f509aa-e20c-4daf-9534-9712d157f728", "comment": "Malware payload (Mirai)", "value": "eefa0ffb201f49bec627b70117f57a7f", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130441, "uuid": "94b55b2f-abc0-4c06-b74c-c8b858d0f98d", "comment": "Malware payload (Mirai)", "value": "0e8014c37974401c21e48e03396e2587a3107de2cf1822eaec043cdbb00d42ec", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130441, "uuid": "eecbae3a-ff36-443c-b9a4-66e669910837", "value": "T16A13D806BB110FF7E88ACC37459E6705189E648862D4BF37BA38D8A4B64735E18F3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130441, "uuid": "64ee2f7c-ac01-4249-99e4-8c2d9322bdd4", "value": "384:UO+/DFQNLv7UsB5ffNd30o88l3DiE+u0l3DYZLxO9cZ/hySF7godFGPFBnmvoPVr:UO+/aNLvD02/L7giMhOz47JvvWaw7F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775130441, "uuid": "c13cbe12-65d9-45e1-baf5-58370165c51b", "value": 45112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130441, "uuid": "01ca8b92-af30-4c4f-a11c-12a4b3a5f2ad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8084b8a1-2e14-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775130441, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130441, "uuid": "d4d35b68-c9c1-409b-9c38-c025e71a1e68", "comment": "Malware payload (Mirai)", "value": "27eaa461169cfb17d76dd38993534ac2", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130441, "uuid": "dcc331ed-e471-4b70-9d23-c0c1aaec7f9f", "comment": "Malware payload (Mirai)", "value": "f2cab18500acd57996c05a68f74d08badcc9518d453d9d0ee1e3d8ae0ac3b345", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130441, "uuid": "efbc7cb7-9b90-4341-9094-ab861651965c", "value": "T193937CC0F683C4F6E84305B1507BE7379B32F1B9101AFA43D3699A72DC91951EA1AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130441, "uuid": "3363e500-ec60-40cc-b4c4-090058601837", "value": "1536:W/QCZaxGdvts3i5JPhoTIxPu++ALtgUIKqI4FrS4LSc:WYCZa8dvm3oJPhWIxP5htSKfUmDc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775130441, "uuid": "4cd96022-aa2e-4f9f-b3b2-87f1ae2d6327", "value": 89992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130441, "uuid": "dac8b85b-759d-4e63-8e66-b7fe8e2304ff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "812799c9-2e14-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775130441, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130441, "uuid": "4ef5662c-6901-4697-8f0b-058cb5c9a635", "comment": "Malware payload (Mirai)", "value": "324ee226cfbb2c5e7472fb03548b8ba5", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130441, "uuid": "2c02349f-5676-4be8-affe-91dae7cc7c72", "comment": "Malware payload (Mirai)", "value": "4a2ff2a16d6e3d0a523e1bc5492aa26b97cdacd3e8e9dbf1b5e1def47178b8ff", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130441, "uuid": "4b328820-cf67-4494-bea1-28ec02cfe57b", "value": "T1CB13D80EAA058FBDFB59873486F78E169A6833E217C1C542E07CE9505D6034E681FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130441, "uuid": "5c49ec66-c9aa-47e6-ad9c-88f32b10e959", "value": "768:fI3lh+K87Af9QbD19XDKj+3GyU4/h9dO0w7tJo:g3lhg7YQbW4FO170", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775130441, "uuid": "6817952d-1ad8-4e0a-a56d-aa901bf7c8fb", "value": 43812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130441, "uuid": "040cf2b7-3eb3-4ae0-9320-cacc6d358087", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82986c53-2e14-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775130441, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130441, "uuid": "7fdb392d-e7b4-405c-bba4-4616f1155cb7", "comment": "Malware payload (Mirai)", "value": "508e0cbbe4d0aad404b3d096623b1e0b", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130441, "uuid": "5edee706-a78a-45ea-a784-22afc130c0e9", "comment": "Malware payload (Mirai)", "value": "3d3f8ae68fa34cb16982e818e0d53ea00303d26eeddc9322104c291790427e87", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130441, "uuid": "3e47b06b-3949-4a95-bf4a-d346d8b775e8", "value": "T1E7D35C17B5C180FDC4DAC1744F9BF53AED32B1A91238B26B27D4AF222E49E205F1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130441, "uuid": "25365d23-e693-4c3a-8634-4a8d3a647963", "value": "3072:79eSuygEPjt6qkWq6dKmDnYMb0gBd/gQyVGsdqml6Paj:79eSuygEPjt6qkWqpeH2laPa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775130441, "uuid": "f8b2ea0f-6787-460f-ae4e-1aba4038ded5", "value": 139800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130441, "uuid": "c78db008-af85-4c39-92a9-c52966802a31", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "702a1d03-2e1b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775130442, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130442, "uuid": "03d27c93-0f5d-4c92-9aeb-9e163b3d7d69", "comment": "Malware payload (Mirai)", "value": "d8058368392690e3c7cec607eaaedebe", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130442, "uuid": "7a5c2430-bf08-4429-af42-98bf6414b4ee", "comment": "Malware payload (Mirai)", "value": "7a1136c218ddf262cb29c1bffb4b7dcbd39c2c9f435bd42287d4c3ad3f2db7d8", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130442, "uuid": "181a4ee5-6fc5-42fc-9178-219da7da001c", "value": "T1EA13F954BAC1462BC5D52278A2AF5BED3720A3D5E2CBB303D5245FA47E8264F0E13F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130442, "uuid": "03723133-d1ca-4bae-a41a-edc7159383f5", "value": "768:ki+yEyHiG8mwTeb0pcLFSxshZ+DqdI2yty4obQw7BTEsHPeV2:kZycPVTeacLxZuII2ytQ7BT5HPJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775130442, "uuid": "24515641-fb72-4e8f-b9a1-1296fc442b8f", "value": 43767, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130442, "uuid": "bd6023c5-ab9e-45ca-b93e-e33948340259", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "836ff4bb-2e11-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775130442, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130442, "uuid": "d4edfdca-cb02-41f5-ab4c-9eb91f2ab0c6", "comment": "Malware payload (Mirai)", "value": "0a62b1440fdfdd722729939fb8ccc16a", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130442, "uuid": "8358a6cd-3300-46ea-8d33-6a18fcbbe8f0", "comment": "Malware payload (Mirai)", "value": "d968cc965bf4e5737413f4d730dbaac7b27ad8fb30beb182bcf6ed9af8811ff3", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130442, "uuid": "3ba967e7-1e81-42f1-b2a3-fd56514dafee", "value": "T12AD22B0AB901452ED9C614BD601BDFA99FA563C1B283160B1BF8FE933C7322A7F11D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130442, "uuid": "049b8806-6d64-4bef-b06e-eb3d3c54ebe0", "value": "384:0bksdWGKXtIbWUxRFBgqai3UGrfFoqIoodvO8u/3hO1Gau4p:0bZu7yba2rtfUEvhO1GauI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775130442, "uuid": "f5e3f2c8-b27d-42b6-bf94-c8e54680ba93", "value": 30576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130442, "uuid": "c1ef3ea0-020a-40fc-aec7-a457fcebf857", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "806cd833-2e14-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775130442, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130442, "uuid": "87922548-d14f-4904-823d-15079dc0c6f7", "comment": "Malware payload (Mirai)", "value": "23319481362fa32f9a1486e9f2b91380", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130442, "uuid": "742356df-98c1-46fc-9c2d-f7addf6dd347", "comment": "Malware payload (Mirai)", "value": "5d4f85b6a04e4f1ca86807b4ccc00292f194a2f288d2f7582c665cf6cc20905c", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130442, "uuid": "46a7b5a0-5158-43a6-9666-51187c2f99dd", "value": "T12DF2E751B8928237C1E112B9B7AE5A8E373573E8D2CBB317E82107607B8561F4E53F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130442, "uuid": "cba50d05-31c3-4150-85e6-826539a86f4a", "value": "768:jSL3pPJKXWnLm25RmiIu6xV/mKZhUhbyno6+w7:+1BKwRbmiIuXKXUhbyR7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775130442, "uuid": "3b8d1d57-3a15-4843-9d04-0b362ecae0a8", "value": 35960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130442, "uuid": "8584fa82-52d9-4549-bc80-ac13e9ee2c9d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8557ab7-2e16-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775130443, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130443, "uuid": "aa4f78a3-6e1e-4d3d-a1d9-a3a6f3f6e491", "comment": "Malware payload (Mirai)", "value": "6fc4228cb8868661ea4510e5db43de13", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130443, "uuid": "dbe07097-84b5-48d0-b18c-e93ea3dc2974", "comment": "Malware payload (Mirai)", "value": "f7c3f7f576203c39b4524a46da6b7693f83b58efa5da9b0c3d63ad8e878b3b6c", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130443, "uuid": "0005fa54-35e5-414e-8dfc-702a09b86ea2", "value": "T1DBE21A13B1280B2FC8D20230142E47954BBE96C556E4B5CFE67F57B21AB1E2A2C56F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130443, "uuid": "baf755f2-46e9-4e34-80d3-8dada50aac6a", "value": "384:tQb9H/kqRo+IRIqgW98hgRTDPDuUT4ufXctw3BS8gE8v7N7bAodvc2hQVZ3w7zj:tEGPRI88+RTttk7zBhQVdw7n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775130443, "uuid": "fb00b6d5-33ea-4324-b4fc-319e5d97f0c9", "value": 32344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130443, "uuid": "b9b61a5c-eee9-4268-872c-0934fbd36f50", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84cce5f5-227f-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775130920, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130920, "uuid": "c5d8c5b9-4a8c-4c68-8706-8be762f5f15f", "comment": "Malware payload (Mirai)", "value": "b587c99df221295fd6bbc50d926340de", "object_relation": "md5", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130920, "uuid": "9452c5ea-6bdc-4829-8024-47e233cb18c2", "comment": "Malware payload (Mirai)", "value": "2db8dd77b3248960aa7103a05a78851c0719b44366e80f91adfdc71ed57b84df", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130920, "uuid": "a4cf3e3d-5801-4c3c-94e2-1722a6443b69", "value": "T136142942F8814F16D5D012BAFE7D918E33131BB8E3DA72269D246F60378B47B0E7A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130920, "uuid": "d2a3a74c-ed02-4ecd-a03b-c471ff4c0080", "value": "6144:AnAW7RK8unx19Uat+YpX3oHO0aWJebZ/3:AnAWO9bLpX390acep", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775130920, "uuid": "16a7354d-5d4d-4134-9eee-019d004ef468", "value": 208092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130920, "uuid": "98b6617e-24cf-43e6-8dea-55c27c4bab5d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84f1ff2a-227f-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775130920, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130920, "uuid": "0aff28bf-653c-45fb-843b-295ce8b0f068", "comment": "Malware payload (Mirai)", "value": "6ba4f69d18d9a788fe9752d5898bd16d", "object_relation": "md5", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130920, "uuid": "ad10a839-8bb1-40c2-b501-19399f65389f", "comment": "Malware payload (Mirai)", "value": "d852d4987f0d8c789b13ed0c473ddff7edb12ae6716886783089fe5c194c236f", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130920, "uuid": "e2a00530-f23b-4896-bfdf-afd531431b2d", "value": "T170736D19E23E1B16C0D0A47601AB875371E11BC95654DACFBEB20E5FFF722A41C12E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130920, "uuid": "58d3bc26-cd59-4aac-afaf-1f466473c261", "value": "1536:w9djNdx+m13k1rhN2Ze8uweMEHkdfdqryddjj3mr4oXuP:4NsoWIFq+ddjLnoXuP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775130920, "uuid": "0a91181c-1468-4ef9-bf04-9336b024103f", "value": 78080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130920, "uuid": "252c9ce6-8653-4670-bfea-f5c24fe8ce48", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84ab887d-227f-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775130923, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130923, "uuid": "3f4d8f1c-69a3-4bea-b442-d111f7c8d15a", "comment": "Malware payload (Mirai)", "value": "1f93bc5eadade556603fbf11824599ca", "object_relation": "md5", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130923, "uuid": "b3aca5ca-9da2-4c97-8370-7ea919e72ca4", "comment": "Malware payload (Mirai)", "value": "e7898203a703a72f0a043fbcaed0da9bb17bd23ad1d11136fb6f4e581b14e887", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130923, "uuid": "01ba03e8-4367-4325-9d51-daf9cbc5c920", "value": "T1429329B22547B33CE9B31878F40321E325220B5C3BEDA1D3B5D3647AEB7460D65A2E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130923, "uuid": "18badeb0-d30b-478f-b6fc-1bbb047e4605", "value": "1536:yq9BfAOTAB6SpcUlwBRWrRj4LIlLwZ6C7URrtKNK:XAOTAIdUlwG1Me4bwT2K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775130923, "uuid": "e73cdf25-5dd4-4fbb-912c-c76700d7da09", "value": 91768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130923, "uuid": "9522028c-7d75-4c5e-a018-89691bdbd522", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84c1f4cb-227f-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775130923, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130923, "uuid": "4215663b-669c-463e-97e5-ae37bc3e04db", "comment": "Malware payload (Mirai)", "value": "f7be80ba920da30c57acc630852e4209", "object_relation": "md5", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130923, "uuid": "246084b1-be70-47ac-a1e8-f12d4cc0d920", "comment": "Malware payload (Mirai)", "value": "eb57bf883da7357f144fc16cb2744cc368d143c5f0e5755f9bf3ac80935cb08d", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130923, "uuid": "c82d9eb3-1d40-4fa6-b0a6-925fa23570ea", "value": "T13EE32A40F987C1F1D8874C3050A7B73FDA31BA695133C76BFF95AE31DAA7A429112A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130923, "uuid": "55aba92e-4897-466e-9c2d-36e3727afb5f", "value": "3072:eKfYS12LiOFPKDiPY1CI7P9CkFSnzibj89Yjs:VYS12LiOFPKDiPY19PsWjs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775130923, "uuid": "a9446391-9b58-4ad0-93df-31a5fdc59c73", "value": 153000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130923, "uuid": "1e360e99-59a9-41bd-8852-c05bf0c1338e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84e707b3-227f-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775130923, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130923, "uuid": "71f89b8f-d85f-4b81-a563-658132b2bea5", "comment": "Malware payload (Mirai)", "value": "ff67d4e7e7d5e3da10aaad093e79cdf9", "object_relation": "md5", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130923, "uuid": "1389b657-a88f-489a-b2e3-db00afd1c3c4", "comment": "Malware payload (Mirai)", "value": "0d76dfc93254e3fda0d60c4c98cd46fb8d9583c19134d0fef292b59a9a2f6675", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130923, "uuid": "398509a8-84fc-42a6-80ed-7bd108317e07", "value": "T141F38D32D8696F98C255C434B0F49F782B13A5A1428B6FBE69B6C3B44083DD9F505B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130923, "uuid": "e34c8799-0e24-49c1-988c-a61133e6bb1c", "value": "3072:F4i13ajXSHWZn8bx7H2bMHCHUHWYIN2byce:F49jXS2Z8bZH2Ar2Y+2bO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775130923, "uuid": "f847a5c7-0c6d-4562-b1f6-668b8859249d", "value": 167776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130923, "uuid": "7072c0d8-c157-4e03-b90a-3e316c073e59", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84bdba78-227f-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775130923, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130923, "uuid": "05b70d2d-2562-4058-8c9b-b2bea6939e94", "comment": "Malware payload (Mirai)", "value": "26fdc113cd46767e6fdc2dac14ad5508", "object_relation": "md5", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130923, "uuid": "0fd47c33-cfcd-49ca-846c-91e63f05810a", "comment": "Malware payload (Mirai)", "value": "c04d526eb0f7c7660a19871d1675383c8eaf5336651b255c15f4da4708835eb7", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130923, "uuid": "139cf871-b828-41e0-89d9-0f6030f20968", "value": "T141E33B80EA53D4F0D8420C715066B737EA32BA7E503BDB83EFA56931ACA6702D525F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130923, "uuid": "c0f587f3-1046-4bb4-9b44-0630d32c575e", "value": "3072:q5tBJEReZiMzcaj9U2KywYPWIL17ZCi5Lj:q5tBJEcZi2caj9uSR5Lj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775130923, "uuid": "7de40a26-516e-4d12-893f-30beb0e4970c", "value": 148104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130923, "uuid": "efb5df2d-ebce-49dc-86bc-4c4ee47d1cd3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "85068dde-227f-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775130923, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130923, "uuid": "e9f4d279-b1ee-4d32-86cb-a9b78416be3c", "comment": "Malware payload (Mirai)", "value": "a35a8bd7ce2c6d772f02332f26381ba4", "object_relation": "md5", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130923, "uuid": "7de941f5-2ad9-45e8-8a84-87a9d6579368", "comment": "Malware payload (Mirai)", "value": "95bcc0a2bb0fff25a2770010406cd0964fd4b3033ed8bae181518f7c8b69d324", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130923, "uuid": "4b3ac4c2-6a61-40fd-b634-6666eb1a6d77", "value": "T1DC043A07B5C184FEC499C07887DFE536D931B85D6238F25B2BC4EF222E19E606A2DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130923, "uuid": "62e90e72-6874-49f3-b758-693c9440a1dc", "value": "3072:o6fBJZVVzg58MZbaTkuxoR0+4QohZzS0qMiQgWlDXTfRRHJAgaKmFnWYl56Y:o6JJZVVzg58MZbaTBxoR04oNPpAThBv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775130923, "uuid": "82c9618d-2f44-4e33-b8af-9e68e9420af6", "value": 185272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130923, "uuid": "eff4378e-9689-4af5-888b-7123bdcbefd8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84d766a5-227f-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775130923, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130923, "uuid": "5139ca6c-15f9-4243-8c96-45eaa68e4386", "comment": "Malware payload (Mirai)", "value": "31f4dbfe3e9e43e7717e38bf04abb4b4", "object_relation": "md5", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130923, "uuid": "c11eb245-8b14-4805-8074-c5b6a53e774e", "comment": "Malware payload (Mirai)", "value": "768120576ba26d8ba3790c99595f8979b3507ab85e357545ebcb624394a3b23e", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130923, "uuid": "c4803106-0a1b-4ab6-8cf9-49b0926c452a", "value": "T165145B45F9405F53C5D226BAFBBE828D372613F9D3EA71139D212F20378A46B0E76A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130923, "uuid": "d27812e5-3e01-4f10-8f68-4ce10f3c6fd4", "value": "3072:XDUg/oKWUUft8hW2zdMW5/WxcfL2/SJ54G8bPxT3mcweGcc:XDUg/nWFL2+WBfL6054G2P9Wcweg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775130923, "uuid": "0b305205-bdd4-40d7-81d0-fc5c68d58f05", "value": 194496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130923, "uuid": "121d0dcb-3559-47bb-b9f1-86ad6d2615e5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8602194d-227f-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775130923, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130923, "uuid": "dbc6e826-8b5d-4963-ab38-785438b22c74", "comment": "Malware payload (Mirai)", "value": "0fac505e1c34ad2c2f108c8fa586d8a3", "object_relation": "md5", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130923, "uuid": "f1579464-e95c-4735-8673-e681f5017251", "comment": "Malware payload (Mirai)", "value": "6daba71be34923681d251392c46817ccb43665818449c68ca99c0f4e58c36e63", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130923, "uuid": "4cd62a69-0cd4-429f-9c1f-2853a60f0ec5", "value": "T121344B46EA404F13C0D727B5BAFF82453333A7B4D3E7720699246FB4378766A4E26A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130923, "uuid": "b40d41a0-0db5-4c31-8bbe-7e16287c3806", "value": "6144:n2Q6YRK8unxh9ua1mHHpUaKVuNw56lxvsIqatkM/R5Stt:n2Q6D9MHpUaKVuNw56oitZ//Sn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775130923, "uuid": "345a89a6-32cb-4443-9edb-2a978d404068", "value": 247991, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130923, "uuid": "6396d153-d211-4fc9-8976-5e6d084dc635", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84f37dbc-227f-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775130923, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130923, "uuid": "5389e081-6986-4325-811a-61be2d00a665", "comment": "Malware payload (Mirai)", "value": "7b91536cfc0c63077420a6fe27a927fb", "object_relation": "md5", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130923, "uuid": "21485f66-58a1-4a8e-9be4-fd94b13b96f8", "comment": "Malware payload (Mirai)", "value": "fed77d5d6d50cc5d1708cb0956d627e4d778ed375ea31631f53b5924dd8e158f", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130923, "uuid": "da3c11cb-304b-4807-9394-b302a70c93e9", "value": "T1E5144B45F9405F63C6D216BAFBBE828D372613F8D3EA71138D216F20378646B0E76A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130923, "uuid": "06ae24e7-0e61-42c6-a9d3-14c4fd959343", "value": "3072:nLSYWvBjb9lYXW2zdMz0Sx6UCpqaUoGtL46QLqUUJeO7CD9gcc:nLSYEJP2+gSqpqlxh46CqBJn7Q9m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775130923, "uuid": "8d7be26e-75ed-42e9-adac-f0f2b08e4d2e", "value": 197600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130923, "uuid": "599ffbd8-1adf-4e12-966e-f033de12ee4c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84e3aa0b-227f-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775130923, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130923, "uuid": "f4821656-4529-4049-a806-b02177f2e560", "comment": "Malware payload (Mirai)", "value": "23d815d05f6901340b4e2ed399dcc65b", "object_relation": "md5", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130923, "uuid": "f030a536-3295-4aa7-b39a-c293ab96d1e9", "comment": "Malware payload (Mirai)", "value": "582bb1474d2a8e5c451be6ba65a27f4aa9a682029fc06f47687238db32de60c2", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130923, "uuid": "80302fbf-9b5e-4855-9d20-602b88695f10", "value": "T1A3145CC7F801DDBDF80AF73A44130915B630B79114924B3373AB79ABAD3B1961963E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130923, "uuid": "8b8614e3-6c00-4d1f-a30e-b20548e2fb8c", "value": "3072:F8qSaAevzBo+dmftXnjMz1uC3+u0mVoVK8V5EApyVxjbi9LlNhy8fl0s:BS2BogkqwVmVo08EAp5L5y890s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775130923, "uuid": "02973872-b794-48fa-9bfc-16b6be6da1e6", "value": 201440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130923, "uuid": "219f979d-40a1-4b3a-82d5-5cb09b7d93b7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84edc1b7-227f-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775130923, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130923, "uuid": "6e2b9e87-9ebf-45e4-b41e-bae2dbb7fff2", "comment": "Malware payload (Mirai)", "value": "be6a8e08039353d786a71932a3ec9223", "object_relation": "md5", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130923, "uuid": "b0a88fe2-a8b3-4a0c-b5ae-ac817a88f8d8", "comment": "Malware payload (Mirai)", "value": "1126ff66050524c1a9eeda89db25ad6c2b3b373282f1a2c5e6697e22ee25c54c", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130923, "uuid": "88aaabc2-c9db-4e47-8534-fde62c179e21", "value": "T186340A16AFA10FBBDCABDD3705EA170129CCA44721A43B393674D928F54E64B49E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130923, "uuid": "60db3e08-5070-471f-8cbd-8576f2ad861a", "value": "3072:dopMix379N5BaQ85SKRmu2aJZnqfuqlepGdUQRbHyUzF1l5Jjk1Y7/CLcg:dopMix3NbAFqNeoUQRuUzPxjkY7CJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775130923, "uuid": "50b1c6ca-d4d1-4d18-be20-08443540fd6d", "value": 252680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130923, "uuid": "4ee41394-c6cd-4dc9-88db-08d3525ea3fe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84eaefcc-227f-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775130923, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130923, "uuid": "4d30af0e-07cf-4f90-bbe4-5a1d60097776", "comment": "Malware payload (Mirai)", "value": "f10a44c26147b88486546758338678da", "object_relation": "md5", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130923, "uuid": "c4cbf49e-214d-449f-bd05-7bd7e02e0591", "comment": "Malware payload (Mirai)", "value": "e827d062c77dff478eea083e9d7f9b0b2814691835ff5af56373705660464281", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130923, "uuid": "8e7b0d38-50a7-4400-aecd-8eafec2b1fb2", "value": "T1D6340B1E6E228F7DF768C27447B78D21975833D623E1D680D1ACD2112F6029E691FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130923, "uuid": "26a41c64-14c4-4d16-a64e-35a3e209036d", "value": "3072:/Xu2+rCr0B+SbJDQ0YeJvfaLE7uJm3Q9+RfQ3n/PfkXFZKlf3cYRl:OrCr011tjaLE7uBQYPfaZufx7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775130923, "uuid": "a8793e78-08e7-47e8-9d36-f57e9863184a", "value": 249736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130923, "uuid": "2be13a80-ed48-4419-8c15-2f1a6004af82", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84b572e2-227f-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775130923, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130923, "uuid": "23a7c351-9c32-4fa7-b9f8-c84d65111a1a", "comment": "Malware payload (Mirai)", "value": "d245cc9d5a0e1b74fe03d0c579f6eabf", "object_relation": "md5", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130923, "uuid": "ae32383f-b768-4887-a884-7fd04f8af2bd", "comment": "Malware payload (Mirai)", "value": "6f25d5944076f7ec26f75fc4285fbf14c98788f939f7deddf48e07aaef848e74", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130923, "uuid": "5cbb530e-d19c-4f08-9eb9-b5ba8c7ecadb", "value": "T121145C01730C0907E1532EF43A3F6BE193BFE99125E4F641295FAB899272E325585E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130923, "uuid": "13e5fefe-988c-4ca3-b4c6-43e7ad42a911", "value": "3072:Z9p0k9+jlVFfMLVVIsSZVVhrZxN+cqTzOo5j0+KKcGWq:Z9pV9kfM4sSbrZxAcIzOQ2eb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775130923, "uuid": "758d9698-5934-4159-adc0-48f6adef8a02", "value": 192760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130923, "uuid": "64ea61c1-fbd9-48ef-901e-6135bdf60289", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19183cb3-2e8b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775131038, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775131038, "uuid": "d4f0b781-adeb-4548-9976-c2ff0a9bf013", "comment": "Malware payload (Mirai)", "value": "0f521e057ba61ae49329db721446ae5a", "object_relation": "md5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775131038, "uuid": "44a8bf5e-f3de-48a8-88aa-01b64a47a488", "comment": "Malware payload (Mirai)", "value": "65d10ce7d4cbda9b316b4a4e1d82e0cd111f741b8aa2cf595fd9183de6364a34", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775131038, "uuid": "13a6c42b-1b62-459d-bafb-973c0905474d", "value": "T1FC01B1CC3134247075B6D8E65E32AD1831C990963DC63DB878E6B0EA85F5D10B98A8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775131038, "uuid": "110d46f1-46f7-45ed-ad2d-fd7b42948449", "value": "12:YkF1kcClZF70SAaHFKaHFTaHFWjLSFSrLR+FM5gFiLTjLSFSVLR+FMDgFiLXA1Ld:ZDkH/FbzHFFHFGHFWjOF6EFM5gFiPjON", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775131038, "uuid": "f8bc17a3-e885-4958-a52d-69b684c86846", "value": 744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775131038, "uuid": "9469434e-7f98-4f82-93ba-7249d9ec50e6", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ec36ef9-2e8b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775131155, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775131155, "uuid": "77c81f80-577f-431e-917a-8fc1829bf912", "comment": "Malware payload", "value": "f05ff851c16a9aafe2e0b48b5a0e3fd9", "object_relation": "md5", "Tag": [ { "name": "87-121-84-18", "colour": "#11529b", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775131155, "uuid": "31b40661-bf2d-4e26-98e5-140aece6c99e", "comment": "Malware payload", "value": "d17c10cf0975ffbc60f7d6a0b6446524e1608be0aa1fbd2ea0cc39d8388fc9bd", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-18", "colour": "#11529b", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775131155, "uuid": "90d638eb-b85c-4517-a84f-720e1e1854c0", "value": "T1EDD0A78EA953216710658C1EF2B39415A708925E9C5566143F4D403B5BB0A0471D99", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775131155, "uuid": "49d57103-a0ee-4cab-9875-a73f48bebd48", "value": "3:TKH4vLYzVDNqd47LHE0uT9ZVmtnvbMFsMLONFoEudF/F0TDNcM9pBEvNTOSNmO9/:hT4Vz7Lk75l6NXordM+MhkT7mOCyd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775131155, "uuid": "bdc40a10-2a76-4f1b-8dd3-02c6d7a4d399", "value": 244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775131155, "uuid": "d46c30ec-c2d9-4eb4-ac1e-488a318e97b7", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a129e2c-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775131217, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775131217, "uuid": "20652109-2917-4570-912a-0e61f24a8023", "comment": "Malware payload (Mirai)", "value": "3b21de7f912cd4826b99458e28649126", "object_relation": "md5", "Tag": [ { "name": "87-121-84-18", "colour": "#11529b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775131217, "uuid": "c2a2c393-4f4c-47b3-a1a5-62894c53ce19", "comment": "Malware payload (Mirai)", "value": "fd6e9f5e263af5b73dc576e9fb3dd6a930f2a3003527414c3d3b829135a12e5c", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-18", "colour": "#11529b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775131217, "uuid": "86d3cce5-5c63-4f42-9201-43744b380b38", "value": "T15D63410ABF611EF7F86FCD3706E52B49308C641A21A83F757974E918FA4A10B54E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775131217, "uuid": "3c9074f5-8be7-49e0-9d70-41c5770567e9", "value": "1536:nxo6M86eAtqVUlf2VNufYuI0Kck6n2MFiwbZn:K6MjeAt8U92hulKV6nkwbZn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775131217, "uuid": "8687da9d-9d69-4631-abab-f73444e6f8f9", "value": 71480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775131217, "uuid": "22c951ea-7d03-4a86-b943-2a6fd7059dad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87150698-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775131217, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775131217, "uuid": "02223969-c9d1-4af6-af09-f24c86df5fad", "comment": "Malware payload (Mirai)", "value": "69bcf3d8066af65a52efec8dd9503003", "object_relation": "md5", "Tag": [ { "name": "87-121-84-18", "colour": "#11529b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775131217, "uuid": "853c0958-bcd4-4505-879b-729f1be8111f", "comment": "Malware payload (Mirai)", "value": "7642e5a3babf161d0f6888ad411612026c29d808c2aca6baa36f060faecf1410", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-18", "colour": "#11529b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775131217, "uuid": "672500d0-a5a1-4a68-b43f-d436fe8602f4", "value": "T16873074AF9829F10D4D913BBFE0E018D33536798E3EE71129E116F11A7CAA5B0B7B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775131217, "uuid": "d0d30c36-fb9b-4ded-a02a-00ca42313d70", "value": "1536:K9nq3zwiiI5npnFUNh0n2eooZnknrw6iYhf8XllzfisgAXU5wbZn:5jwFI5pWNh0Wo2nrw6iYhMVgAE5wbZn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775131217, "uuid": "358df02b-3b1e-42e9-8e4b-22dc6ae63c8a", "value": 75616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775131217, "uuid": "ea224337-a6c9-4d46-90cf-edff646383a4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "804df7be-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775131217, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775131217, "uuid": "1e847931-a5da-4abe-bf78-fe9e7ff1e501", "comment": "Malware payload (Mirai)", "value": "09f6bfa87fe3c441494babb44d554951", "object_relation": "md5", "Tag": [ { "name": "87-121-84-18", "colour": "#11529b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775131217, "uuid": "f059b6f4-30ff-4931-b560-dc4eb984b887", "comment": "Malware payload (Mirai)", "value": "a78cfdb0e92334df680191c8aedb712828434ac0c2e363abaab5363d8c5d080d", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-18", "colour": "#11529b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775131217, "uuid": "34c81740-a3a5-4a8a-9751-c8f426a1e329", "value": "T14663511E2E618FADFB6D873447B75E21F24873D212E2C640E15CE9015EA034E785FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775131217, "uuid": "0aa5b76b-36b2-4eea-8b34-1f7825c5ebba", "value": "1536:qZSWtG1Oyu8jDZA1vDMNYdDiwZwnUwbZnL:+G1OMlAKNYdDiwZoUwbZnL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775131217, "uuid": "4f80242f-1e71-43e7-b644-bf14f1f1b658", "value": 68008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775131217, "uuid": "f3893e32-a22b-4944-935b-1cbd76d08c3d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83f4be22-2e8b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775131217, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775131217, "uuid": "253805d8-917e-44a1-bf2a-2d5b3d5a4b7b", "comment": "Malware payload", "value": "f88a2e1126f608473a478c5ed455a098", "object_relation": "md5", "Tag": [ { "name": "87-121-84-18", "colour": "#11529b", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775131217, "uuid": "49fdd1b4-9e27-4c68-9244-5c60bb9a8bb0", "comment": "Malware payload", "value": "e8ef50a1799265d3aa15294e41b66a143205f010e74efdb7915dec21f4bae063", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-18", "colour": "#11529b", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775131217, "uuid": "ce3200a0-2b17-486a-8078-8a41b1b4875c", "value": "T1A5E068D4105A18E5408C5C6F32B7A00859CA9B8ECE065FB8BCAD70B7A728F04F0C60", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775131217, "uuid": "ee73005e-b590-4c65-b367-a084e73960f0", "value": "6:hMfURpv+iFnT7vZsdqaIuOA9yDB2/vXUgoDu/oz+Q7ZYLdyr:uQvDvZ6Iuz9yd2nXeDuin", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775131217, "uuid": "3da8c423-d7b1-40db-a61e-8592313c7820", "value": 416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775131217, "uuid": "ef2932d3-ca99-4c79-b57b-084c97ee0456", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80369f79-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775131266, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775131266, "uuid": "9b473051-580e-4765-85be-0c6951c7351e", "comment": "Malware payload (Mirai)", "value": "9f6aa3aa103e17fed852ac8d5b566558", "object_relation": "md5", "Tag": [ { "name": "87-121-84-18", "colour": "#11529b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775131266, "uuid": "9b710f51-b901-468b-9305-91ee9bae6525", "comment": "Malware payload (Mirai)", "value": "0a3ef431ef6aac9035870acc991bfa9c3b34e1be185656225c8a5016ad0a2890", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-18", "colour": "#11529b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775131266, "uuid": "5f89fcb8-bb63-43d6-ba09-273eac424828", "value": "T1DE333A13258085FCC40982B147BFA62BF562F4BE4234F58D6BE87E26FD5AD310A594", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775131266, "uuid": "c44339aa-f86f-45a8-b032-81b7361e7d61", "value": "768:FnjJrbghrXpCJ9t3C0q0GNls1qtjNo7MM7a0KGxDopKXobZ7/cKYeTBn:xdwG/t0XNlEqdC/7a0xxMd97cBeTBn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775131266, "uuid": "4b2930bf-e335-4d1d-931b-cd4bc938295f", "value": 50176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775131266, "uuid": "7aea8c0e-cf6c-4028-b5a8-1db231dc1486", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "804fc6ec-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775131266, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775131266, "uuid": "849037a3-5e53-402c-9507-d195498a1a0b", "comment": "Malware payload (Mirai)", "value": "ad7c708332c0341b8a3fd23482f0f8fd", "object_relation": "md5", "Tag": [ { "name": "87-121-84-18", "colour": "#11529b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775131266, "uuid": "6a9731e0-170d-47b7-bcd4-f4ecd42a92e6", "comment": "Malware payload (Mirai)", "value": "54b4d835ac88e17b7fd9cfaaac0b65ce7e11c3ff14f6bf0ba5ef95759e16d314", "object_relation": "sha256", "Tag": [ { "name": "87-121-84-18", "colour": "#11529b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775131266, "uuid": "48f54991-28a5-4c7c-a1d0-64bfcac3a88d", "value": "T14933E845BD829906CAD84377FA1E42CD331173D8E2ED7226CD157F51B7CA62B0EAB0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775131266, "uuid": "7e6ed327-34e8-4c59-a2e3-70896403b6d7", "value": "1536:ZZ373CYePDBvT48TgEoxmnv44D0bwbZn:f3738PFcVEouv6bwbZn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775131266, "uuid": "380c909f-a3af-420c-935a-c80945ea9ffb", "value": 51624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775131266, "uuid": "9f1499df-369b-4f11-b1f5-1617ec86a0d8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a24c157-2e92-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775134100, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775134100, "uuid": "bbbad90c-a34a-4a61-a08f-5fc8855bfba6", "comment": "Malware payload (Mirai)", "value": "a53254fd5a91c98d97ef2dcf9210f851", "object_relation": "md5", "Tag": [ { "name": "195-178-110-204", "colour": "#b3a020", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775134100, "uuid": "ae2c6a8e-268f-4f06-9f57-944d94ebb7f4", "comment": "Malware payload (Mirai)", "value": "5e2bc42694b4eddb372a8370937a19cd71db11c8275a0a12ade339f2862fac55", "object_relation": "sha256", "Tag": [ { "name": "195-178-110-204", "colour": "#b3a020", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775134100, "uuid": "7e72b7b2-c801-47b3-a4ed-45f0b65aaa47", "value": "T139733BC2A783DD7FF9698BB48A628AB833C5059F25E5D5D7D32D3E0D07301819819E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775134100, "uuid": "5ac5e5f7-c957-4bdf-aaae-04613e6858ea", "value": "1536:DGkrw0OW873d6/4aHYi8EDpt4Z1k91YfLX3IuR1RzpXKTp9tqVsDE/4xWx2Qrgjf:qks8873SLRt4ZGLQrgu04ck", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775134100, "uuid": "351c6676-2936-4cef-97d0-9a6da2348411", "value": 79544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775134100, "uuid": "248c115b-e2f4-4408-9679-9f4b810e1137", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ef6e3ea-2e92-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775134135, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775134135, "uuid": "02693c10-3a0f-464a-9f96-4a0796449446", "comment": "Malware payload", "value": "b4524d0afe4e17be736940773030c9a7", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775134135, "uuid": "83c7f437-a728-4fe0-b363-6fb012043a46", "comment": "Malware payload", "value": "53645a6505c221b16fc220bc5883d1b94284c6b86ec37d790c50f5063bf23cc4", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775134135, "uuid": "9cd54391-673e-4cf2-b4ff-f08a7eac628b", "value": "T19393E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775134135, "uuid": "fce9aca1-8db8-4410-9290-33265570e0ef", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXRIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775134135, "uuid": "5154b6dc-e50e-4b1b-aa48-058befbf9762", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775134135, "uuid": "45110522-5974-4ad9-ae52-f02134782724", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0bbcec2c-2e94-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775134881, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775134881, "uuid": "c8226b2e-b6de-45c6-8786-cb504cafc18f", "comment": "Malware payload", "value": "7e3cd917fd2ec4a3b545a6d230341bb8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775134881, "uuid": "02ddccf9-2abd-4608-ae2d-ce85f08e760f", "comment": "Malware payload", "value": "92c5a3b4f0a550d95304411367a854ac0fd9cd3a69f29ad1d6ccc2f83a91b36e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775134881, "uuid": "740ce25a-deea-46f9-822e-9e68bdd7591f", "value": "T1F88309327488582A210B428FD267336C70AFDCE2D611E5B6F6F632344BA5EE135B76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775134881, "uuid": "9c92b6a4-081c-4745-9dd8-0de1feb957bc", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnAWaBVN/:XEKltp9txAX/yr2pbAWgVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775134881, "uuid": "87284d2c-a760-45c0-9f8a-a1b4e73547d8", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775134881, "uuid": "55669dc1-2a41-4d32-a995-e1ddd5abc806", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b7c7fb5-2e94-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775135068, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775135068, "uuid": "6e372a64-545c-4c54-a3db-51bb08625529", "comment": "Malware payload", "value": "8e0cd2f6745dd2b7e7f87f290dd8c275", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775135068, "uuid": "486ee0c4-c70a-43c0-9487-d9f602461d15", "comment": "Malware payload", "value": "6e94bea91fddf68b854b85dd34977b14ef6329ddbf6bfa8021bfd1a894d5d3dc", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775135068, "uuid": "8ca550d2-7c18-478c-9a31-bb7db44c0f36", "value": "T1A256331FB4E5E2E7F714B0B616F3BF15ACD3EA480D9748B38C056824522EA7672B6C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775135068, "uuid": "af52c87e-4ef9-4498-b204-6476f951d2b7", "value": "4b8ea275b01195301d047f45b8ba14d3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775135068, "uuid": "7a2ed7aa-cafb-48aa-b0eb-71e23395d18c", "value": "196608:xsQdb1840wGXIy4+ompCxyCR+9xSm/pBCPhb:xvtGXK5mphk+62pBCPhb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775135068, "uuid": "826e6012-5860-403e-ba12-c32ea103ec48", "value": 6316835, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775135068, "uuid": "7c0c3430-8abe-4dd7-bef4-29a483fc4c89", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1fca7683-355d-11ef-b2b7-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1775135807, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775135807, "uuid": "3373647a-8902-4b8f-9613-76768f1fc90c", "comment": "Malware payload (CoinMiner)", "value": "1c16a630f64fcde9c94e5fa219374330", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775135807, "uuid": "bbb1d93c-b730-4e5c-a936-0ffc6b7eb65f", "comment": "Malware payload (CoinMiner)", "value": "efdf8e6d182ba4644375fa7eaad615b0df41f4e872e1550466e76c8b2d816ddb", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775135807, "uuid": "05c2258d-2f2d-41e5-83e4-cf1e707add9e", "value": "T11D563362F440E432E038203925F684A6B17DFD7347654A8B73A93A364D793D836BDB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775135807, "uuid": "f67e1d0a-077a-4727-85ff-89102dd69dec", "value": "98304:EUmC6pOfTFU00bm8FmH/tFErRoSncMEOJaTMOKXX+dAnsvxXe+:mWfTFU3muRH6OJAMp+ysk+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775135807, "uuid": "781f5f78-58b7-433a-ab9e-920faedebb1a", "value": 6271176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775135807, "uuid": "be86744b-98a0-4f4b-bde9-ce09024f3a01", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab70126b-2e96-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775136008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775136008, "uuid": "68c497b6-b499-4500-a7d3-e2700caf8c2c", "comment": "Malware payload", "value": "1f9f8183c5f48241e45d137ae1319a9e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775136008, "uuid": "43a4eab0-821a-4b0a-9097-8f7c839979cf", "comment": "Malware payload", "value": "60f1095bd83b5f29144c401aae162865bd52f729272158e8cc79ca144ef267c6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775136008, "uuid": "bd437e60-6423-4234-87cd-2445ca56b492", "value": "T109931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775136008, "uuid": "ae515285-b5e8-4896-aa3f-df17b59809f0", "value": "1536:0Byp1tF/uwMmAIa14oXx+I7epeV7tb73WdxCrCitkb5fv2v05xsprCKm1sPyK+t8:08jI00GitkbFv2v05xsprc1sPyVt3y7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775136008, "uuid": "e7be00f1-72e2-412e-8ad6-d876b4cdfe33", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775136008, "uuid": "9f608cfa-604f-466c-af73-43ad41e75114", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "866dbb2f-cefb-11f0-bee4-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775137822, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775137822, "uuid": "9a227309-99ae-47a9-959a-a73ee397c63b", "comment": "Malware payload (Mirai)", "value": "e3ca702505aa8cc3944e0bbfabdceb40", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775137822, "uuid": "1867b231-9ac6-4ba4-a7fc-6d5a935a64a9", "comment": "Malware payload (Mirai)", "value": "c78ca6ee275aec8ce7513d31c5332e1e7ad7742308d0ce3d70393aac4fc4ea26", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775137822, "uuid": "fd278c97-94a4-4a73-8bdd-48617c78cf78", "value": "T124D312ABCCBB89CEFE6A8FB52657094F0DF6E1D4E5843D98453B108027F8256A514F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775137822, "uuid": "b398cb8d-cafe-4b49-a523-3a30ec122d61", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6con:7O/QJHZweEL/NOjCHm7FZZnca", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775137822, "uuid": "d21d9712-126c-45cb-87da-4ada34d21db0", "value": 135660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775137822, "uuid": "c00c5d5a-049d-4b0d-9367-6d42ae071067", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "41d472e8-2e9b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775137978, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775137978, "uuid": "e00550ee-3152-4047-b6dd-bd4814a7b6f0", "comment": "Malware payload (Mirai)", "value": "0546aa0ea49b13c4d7576d7e62246d52", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775137978, "uuid": "95d90448-5b6a-42de-80eb-0b2c96acdcc8", "comment": "Malware payload (Mirai)", "value": "6f63e080b5af38f25373d58b18d478189eca4998864517035b1c6667a21028da", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775137978, "uuid": "647b551e-71c2-49ff-be68-d586b594d9ea", "value": "T101D3290B75C0C0FDC8E9C1784BFEB126D972B46D1238B61B27D8A9222F4DE205F6DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775137978, "uuid": "a7edc130-f93c-483e-aa3f-59ed88cd34f2", "value": "3072:y2VW3ZQ79cv7DnTimjdO1xxxhZgA3RJutA0Vh0C:XKvTyVgA2q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775137978, "uuid": "4873d51f-ca27-4fc3-b0b1-77a587813eca", "value": 141480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775137978, "uuid": "edcd37bb-d779-4d49-a3ce-3606aed5ba6a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d001dd6-2e9e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775139285, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775139285, "uuid": "446d3719-a9d7-4497-961f-4043fb0504d1", "comment": "Malware payload (Mirai)", "value": "edbf9482503b53f5e14aad85f4e0dc0a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775139285, "uuid": "ce9f9701-6732-4300-853e-a0888fd427fd", "comment": "Malware payload (Mirai)", "value": "1c2219f1d3badcd05f2a7a148016dccce79d21dd5659278ea3741ed364f44035", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775139285, "uuid": "9ef2de57-dbe8-4138-b72d-5a542e218e2a", "value": "T152E3F856F8819F12D5C111BAFE0D524E37231BB8E2DE72029D246F717B8B8BB0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775139285, "uuid": "3c3a33a5-6541-46f7-b410-1c90261c2c42", "value": "3072:YyKY30cQ/7t1X9oR2a5WN0kier7bbQRCC9zevms:Yy5BM/X9oYaUWDa7bbzC9zMms", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775139285, "uuid": "69330539-a377-417f-863d-60be08dbafc8", "value": 147856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775139285, "uuid": "dcc452bb-625d-41fc-8dbb-a274264dde4d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66cde88e-2e9e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775139328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775139328, "uuid": "ce79e707-efdb-4c3a-bca3-6597b95cffc2", "comment": "Malware payload (Mirai)", "value": "003473c3230411fe210a458a4ab2d005", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775139328, "uuid": "6e091d72-8282-4834-808f-951d41a4f7dd", "comment": "Malware payload (Mirai)", "value": "3956cc41fa0eeb99e07dab7f27178d8d392d2275183c9812312348eef1b80f89", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775139328, "uuid": "10e802c5-e104-4438-84e0-ed8f382ecdf1", "value": "T133A36CC1FA83C1F1E85304716163AB3EC732D8645035EA59EB9A8F36D933941A7273", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775139328, "uuid": "8fef599d-7e32-4f12-a2bd-30613291c40c", "value": "1536:GWrYWK51zZmXJ0/+O1lMWqc66uq0g8APxp1/F:GWsr51zZmK+Wv66uq04F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775139328, "uuid": "a9319f9d-2aa2-4fce-9599-c12bf8f4adbd", "value": 98380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775139328, "uuid": "056edb0d-264b-4be3-b8a4-a37e7f21d749", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e572a3a-2e9f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775139610, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775139610, "uuid": "0266e27b-f4ce-4b5a-b4a1-f8e5ab0bfd23", "comment": "Malware payload", "value": "0cfa1b847d9aed30f898765bcee28015", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775139610, "uuid": "0a68a195-0225-40e4-8188-56439161bb28", "comment": "Malware payload", "value": "8c30221ee1b0f8c5d0d8d057b5bc8452519aefb814cb20281cfd609ef3416b81", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775139610, "uuid": "3f0c8beb-d9f4-447f-a6bd-9aa1de8c3218", "value": "T11D34F1424BCC19F846AC8720C7AF2216A1423FCB517DBFF849D16B9F09F5CA1ACA55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775139610, "uuid": "f3881328-73d6-45c1-9531-7885201e6484", "value": "6144:LguE8UaeKgZZjUQo3umLfZ73AxEGGNgPG58cO:LgzHzifLh7YlGr5PO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775139610, "uuid": "d60f9d9c-6ce7-4496-962a-a516594ff3db", "value": 247873, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775139610, "uuid": "dd3e7bbf-4430-4f7c-a2c5-48cddf01995e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7dde2454-f2d8-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1775140928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140928, "uuid": "51c1c473-986c-4de1-b177-3b0e6914e25d", "comment": "Malware payload", "value": "e4d5b4b0f98560e882ef7d24b1012b6a", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140928, "uuid": "279a5c75-515e-4a42-a5b5-56887c04c97c", "comment": "Malware payload", "value": "d26c1da1978da0296f16094a6f20cca8d3d5e85f047fc0f80eb203aae6770599", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140928, "uuid": "15510614-97f4-4c39-96fa-0105eee28ae6", "value": "T11CC3F1BCDC2C5442CA1B61F28C4ED11665DF841DF9E79A5672100A480E69EC0FFB6B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140928, "uuid": "a7aa5093-312c-4d5d-9dcf-76f4755cba41", "value": "3072:7gg9/shHyGE5/wskZ0MnIUboP1TXQEAh4:VkIGE6taMnIUboTgNh4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775140928, "uuid": "75074b7e-dcc3-4cbf-8eed-b9266c355688", "value": 120852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140928, "uuid": "907c0907-9f90-4fe3-a9a7-4ec09f221e43", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20776243-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1775140928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140928, "uuid": "0cc6dc85-334d-45fd-b1a3-48ea98c48e50", "comment": "Malware payload (Amadey)", "value": "701ad776e0d850796d94150733b9c880", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140928, "uuid": "5a977a75-cfc3-451f-b739-409abc4eb565", "comment": "Malware payload (Amadey)", "value": "ea73014533b4dcea85e42aec959e4b2eb884c71135516c54dc5e28f0c09643c8", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140928, "uuid": "bbe7f00c-0f68-4869-90ac-eebe94ddfa21", "value": "T145B44A5AA25943FDE07BA17CD5575E42F638B44703B18AEF039005B32E572E2AF3A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140928, "uuid": "fac14194-2604-4c0f-9bd6-31a51981dfea", "value": "8db30f7f23140d78d7f34e827c0f7dbd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140928, "uuid": "a0ef1712-0ab2-4c28-9183-14b70d482e46", "value": "6144:R5RYwx+VJi3YHIu+uUIsVqdEidqKlTZW/Y+6eGU9k6BZ0Qlfj1ohN5MpBPqoYRuZ:R5RFIhHAIsaTdq516yMyo/5MpByoY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775140928, "uuid": "82c1d41b-4a57-40a5-9276-cc943cfa53ef", "value": 528384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140928, "uuid": "dcf09dc4-9838-4691-8dbf-beb570f42f92", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20792aa3-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775140928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140928, "uuid": "44df9ba3-41bd-4b8f-abd2-51a90df6c23e", "comment": "Malware payload", "value": "0d6f948c658033a4507e80aaf943a1eb", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140928, "uuid": "984430ba-8926-4082-9c80-3aa8f63683cf", "comment": "Malware payload", "value": "7638300cef696f8bbc0f7e9da85239f73204e539f863cbc0f49b1e752a541efe", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140928, "uuid": "1624f430-91ff-4349-ba12-4a9bd2af23d8", "value": "T1DAF2D421BB88998E769C0987E03D9E1BA7F32F05EAE3B1CC27573A47254FD5D2608C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140928, "uuid": "26401924-a27c-4662-815f-b83560938c37", "value": "768:TxGPLn4B5eJck/icUvTlrr68ciqYdP6H4FMGQGH7A2LJwT7vNx:T0Tn4BoJceitl+iqG6H4FM9qJax", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775140928, "uuid": "3456a399-fea1-49db-8a19-f01d8c9c2e16", "value": 35877, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140928, "uuid": "d2547360-4d6a-4ab9-9324-f95a2f37ac56", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21bab1b4-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775140931, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140931, "uuid": "2f534a59-65f9-436a-ac20-e846cd7c7bad", "comment": "Malware payload", "value": "a817693644ab0f351cc89762ff45fc55", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140931, "uuid": "e6304ce0-242f-4224-ba60-4a2f76e75700", "comment": "Malware payload", "value": "ce8cb74b3db1bac186ae57524e82d34d247104b43d0623c09712706938dc0642", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140931, "uuid": "30a59f6c-9d87-4cca-9170-578ea1a9c46e", "value": "T17326F1CBF798992FC87B10B2896E527116574D128E839F436D44361C6C7B2E82F9DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140931, "uuid": "f2a0c0dd-2c81-4b22-9cc7-d6bebc0d3d6a", "value": "98304:T9papsDdLeawgRz6ZEFfB7O3x1Jz9/d4WFpZ/dOGsoTYr62Z:T9pa+xe7KmGJBi1ywppnaZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775140931, "uuid": "8243d50f-bcca-461f-b763-6cdec8c625f1", "value": 4705571, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140931, "uuid": "6003eb4e-bf8b-4388-b8ec-ba2a2e5ae398", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2218c8a2-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775140931, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140931, "uuid": "4b98146e-805c-4d65-9316-e446f203a91f", "comment": "Malware payload", "value": "bbe50f050c7fb4a833ef8ec48b59e5cd", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140931, "uuid": "2d1872f7-d7ec-403b-be10-3c70faa820cd", "comment": "Malware payload", "value": "9cd82a50053ee9555d2b2dd68acd0a52d998bf6299cdd46554ee1a57770cf6fe", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140931, "uuid": "c9917691-b808-40a7-a855-e19aa157d079", "value": "T107058E582798AA6AD4EE0779D0205C5883F5EC26AA97D74B34BCB0FE2FB33514D013", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140931, "uuid": "d0e48449-e1d8-47dd-8ccc-b955cd7b5f6f", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140931, "uuid": "c9e96989-b274-4779-83e6-26328afefef8", "value": "12288:Z+Xkj/J4t5zLFv3y1Q1eAfhddeD+u+IY1FW423I73kkeAwaZl3brY:HR4jtvKj423w3y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775140931, "uuid": "88b94f8e-a9c9-434d-973d-a0c592744a9a", "value": 827104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140931, "uuid": "79a0a6c9-2327-48ab-94ff-948bda7e10f8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "225efa8b-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware payload (DattoRMM)", "timestamp": 1775140932, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140932, "uuid": "ac25c51c-d23a-4927-b1e8-dd5b8a028a19", "comment": "Malware payload (DattoRMM)", "value": "8c8122f2ab1c9a582b1fc99c336987ae", "object_relation": "md5", "Tag": [ { "name": "DattoRMM", "colour": "#167832", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140932, "uuid": "d1511606-205f-474f-b1fd-42983b061bfe", "comment": "Malware payload (DattoRMM)", "value": "b9c50cf3cbaa07e1e142dfdd0520a028001685043e5b00494a8d04d20c9dc494", "object_relation": "sha256", "Tag": [ { "name": "DattoRMM", "colour": "#167832", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140932, "uuid": "456a4255-3d0b-4d29-ae28-139395449a1d", "value": "T134B63313C57BCCF4CA234678D6E10A46BB4A058A9C5AB8D4F584633E55D34ADEF38B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140932, "uuid": "a36b71e2-19c9-472f-bf13-492a76b9b3ff", "value": "187b3ae62ff818788b8c779ef7bc3d1c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140932, "uuid": "458dd489-cb72-4012-af61-3ae930f26f69", "value": "196608:NaZk+w/0rsRTjTtR43PG8PZHj2BPFOsti7A95R8jsFp29XaIT030Hy05s6r8Ar8m:pn/04RT9R4PkE7Ap84p29qIT0Z6rXr8A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775140932, "uuid": "4d831e94-a450-4f99-aec3-d4a6c7362bc7", "value": 11055784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140932, "uuid": "3c9255f6-cd31-4ac4-b6a6-e8c557f2b05a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24b03eb7-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1775140936, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140936, "uuid": "144f0827-b9ca-4632-882a-4d60a7e1d5f5", "comment": "Malware payload (ConnectWise)", "value": "eec12eb191f798b52f6fd630e9d32f79", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140936, "uuid": "4021ea14-b6b1-4bd6-9af5-1ebd6e6f186e", "comment": "Malware payload (ConnectWise)", "value": "be6d91050814c3b6b096261ca67d73bbab4d1185843c61fa3db3a5ed2f18b6aa", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140936, "uuid": "8437f008-24f2-45ef-bf65-69eaaf02dbbd", "value": "T150C612129EAD405BE4B64B7DED368EB8696E7E58CE1183EF42347D0D2D309408D633", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140936, "uuid": "6c775f41-7978-444a-b08f-accc032e98dd", "value": "196608:xWh0cGwAWh0cGyWh0cGrWh0cG+Wh0cGHWh0cG:xWac6WaczWacAWacfWacIWac", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775140936, "uuid": "06529619-ac8d-424b-b29a-0c151be10705", "value": 11759616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140936, "uuid": "6f4fe593-adf9-4c10-b0d4-555537ea32d8", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4404c9a5-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775140988, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140988, "uuid": "7cad9730-02f6-4442-ac0b-0a8dac13ced9", "comment": "Malware payload", "value": "19f3c827839373e60dac7ccf15fb8b60", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140988, "uuid": "2deea7a3-6690-4743-96d7-9165ac52acab", "comment": "Malware payload", "value": "1310cb173cb1d94c4facda56a406768eb2937679d013069eab327cf4bfa4d30b", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140988, "uuid": "9a4b1c94-35e1-40ea-b0ce-77e9067f813f", "value": "T12237331CE6BD0630F174417A8B8B4A17D7F2B5CA4732D4AF23946EA90F4F6E492327", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140988, "uuid": "264b5f16-9418-44d7-be95-2da7c56556da", "value": "7c75a83e117d2bdfb2814c53e840c172", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140988, "uuid": "14a6e6e5-e681-4519-b7b6-4c365a30d33d", "value": "393216:DtOCOQURlP8FGo71cPB5tcTkDV/gLkzZ0NmkQgUb5n1mP9oLz:pOCOQYGFGHBTxV/gLkzZ0NLhUdn1SCLz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775140988, "uuid": "1b7a9c65-8871-4d51-994f-5e791ec0b9e9", "value": 22374712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140988, "uuid": "4332b677-699d-4ab5-8ca1-5634bf3a942f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a19a264-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware payload (Smoke Loader)", "timestamp": 1775140998, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140998, "uuid": "4b4a7627-e9c4-472d-9d51-649e7f7be6af", "comment": "Malware payload (Smoke Loader)", "value": "2c5a23a7214690106fa5936695ccb73d", "object_relation": "md5", "Tag": [ { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140998, "uuid": "e870eb05-20c6-4e31-9599-f0c562c27067", "comment": "Malware payload (Smoke Loader)", "value": "c10f5d1f24f3cd25234931ee02482e8fa94f8fa40799255a7acc5c9f634e0210", "object_relation": "sha256", "Tag": [ { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140998, "uuid": "7b909dac-11da-461f-8506-433012b8a98f", "value": "T1A5E4A1EFAF24B5D0D911AAFCD4917E45D3A0BCD0BA9044AE6597FB2BCD38A438F090", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140998, "uuid": "09ee77db-bda6-4627-839e-ef928a27d427", "value": "12288:iVcyEvqc+MAUG6s+pOaQhFglL5YJjZbaI:iVfEv6nUGtEOfSN5iUI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775140998, "uuid": "cd9478f2-2499-4acb-b3f5-4c6ed619a4ca", "value": 704280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140998, "uuid": "a625e36f-a029-4adf-a3b6-f6c99753d92c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "189a2a43-b7bb-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1775141851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775141851, "uuid": "da4f28ed-fd83-40ae-b8a5-37fb296b5a08", "comment": "Malware payload", "value": "e89f75f918dbdcee28604d4e09dd71d7", "object_relation": "md5", "Tag": [ { "name": "@RawabiHolding", "colour": "#4a63f1", "exportable": true, "hide_tag": false }, { "name": "apt33", "colour": "#810f6e", "exportable": true, "hide_tag": false }, { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "darkcomet", "colour": "#3137d1", "exportable": true, "hide_tag": false }, { "name": "DarkGate", "colour": "#180653", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "impersonation", "colour": "#a2d3b0", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false }, { "name": "Pikabot", "colour": "#e499a3", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775141851, "uuid": "970d0f34-5e6e-4a99-8b0b-4bbdf1eebf65", "comment": "Malware payload", "value": "6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023", "object_relation": "sha256", "Tag": [ { "name": "@RawabiHolding", "colour": "#4a63f1", "exportable": true, "hide_tag": false }, { "name": "apt33", "colour": "#810f6e", "exportable": true, "hide_tag": false }, { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "darkcomet", "colour": "#3137d1", "exportable": true, "hide_tag": false }, { "name": "DarkGate", "colour": "#180653", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "impersonation", "colour": "#a2d3b0", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false }, { "name": "Pikabot", "colour": "#e499a3", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775141851, "uuid": "1b555124-0fa6-4b6e-816a-6a205e6ea39c", "value": "T1EEB092DDBC61E48018E535511EA3B60D146A22EBB9018B4018C00836A96035F8D0AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775141851, "uuid": "5db3b1ae-09ef-42ef-9652-692dcfb8d339", "value": "3:PouVIZx/XMn30EEBuvFfD0OkADYyT0NV9kBbZWM:hax/XW3/p5mmYyT0NVuB9d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775141851, "uuid": "29b920fb-7eeb-4d74-9648-0aa6bbfc61e3", "value": 114, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775141851, "uuid": "7f05d148-2a92-4975-b89d-d3fefd5c7b5b", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8abc48d5-2eaa-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775144543, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775144543, "uuid": "d3d9ed0f-db2c-463f-acd6-537cacc476ca", "comment": "Malware payload (Mirai)", "value": "c4126a5ab0aad0d38294ccb2b7a0b363", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775144543, "uuid": "20a7bcbb-40ba-4ed5-bd6b-7b0ac610a300", "comment": "Malware payload (Mirai)", "value": "f004e582d80431ba890cb4be7fa18d512de32c386b4356005b467874a5904f0d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775144543, "uuid": "8cf14053-e37c-4829-9443-4e33c748becb", "value": "T1A1935CC8E783E4FAF85205B221765B32DBB3D53D6029EE46C3AD9835D872401D71A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775144543, "uuid": "010fddda-19c5-4419-b641-1de91c4618b3", "value": "1536:8t8aq1/rKthtKsjfh/a6T30eAQpMzSWgevmLS5X0q:8t8aQ/reh1j5S6T3EQi+xGSq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775144543, "uuid": "8eeae51a-7902-42b2-9a63-9d7fe12db290", "value": 95212, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775144543, "uuid": "5ba6dd6a-45ad-4412-b8c3-8adb84c72f7b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c198bee5-2eaa-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775144635, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775144635, "uuid": "f0531446-9ded-4204-88ad-cd1ba652cf05", "comment": "Malware payload (Mirai)", "value": "8a9a58775d237bbaf7053e1acc408171", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775144635, "uuid": "1ffb94b7-fccd-43fe-bde0-50b489128388", "comment": "Malware payload (Mirai)", "value": "4a89dceadd396eae52f77e7a0db39248bfc0421c6615f732ace330affc9440da", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775144635, "uuid": "e637144e-4849-4d31-aa20-ccc3ad8f78ba", "value": "T1CAE209D6B4A1965FC4C4233ABB1A051D7712A3F4D3DF3B03DE995A82358E62E8A37D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775144635, "uuid": "adb160af-9938-466a-be7a-d12830a64f5e", "value": "768:rmZCyT9psJSeIemBAl+9MlLoL5jEScRJbMDdS1JKmzGn:rYpIzIfSl+9Ml8jjcRZwdS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775144635, "uuid": "ca64993f-c756-4adf-a297-ea085be6ee42", "value": 31572, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775144635, "uuid": "9fb0f907-cad4-4020-bc6a-71467e8fe5a0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e74d7f6-2eab-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775144791, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775144791, "uuid": "2d136421-622c-481d-94d5-ec930741b767", "comment": "Malware payload", "value": "b90b439a8974f06070993f89be74689e", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775144791, "uuid": "24c8bec6-02b6-4bdd-92d9-d694b3c1e26d", "comment": "Malware payload", "value": "ac3e90d79eb09bbaa8fbf1305d0847e9cf69cfb452ca55f14d148c42e384be0a", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775144791, "uuid": "c85eb7f0-0381-4e01-bc72-ba7915976bb4", "value": "T1C622CFB94522AF3AB1C329DD422D2A1993C1C56D3BDB0DAF031731D20DB2BDAEE4B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775144791, "uuid": "2d8ed6f1-a2ce-4fe2-9a1a-5b71d162a49a", "value": "192:ue4IywLFdq0L0tCLTrCEb/74jFg7d1x9KONIwauZ2lvLtLrpn/jcQu8/5K4vxQZx:uoLadIaEb/UgBfkrljtJQv8hnvxcoEKG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775144791, "uuid": "abd65776-53a8-4e20-a52f-632d5daef439", "value": 10496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775144791, "uuid": "cbd01d76-4bdc-45e5-ba7e-09311ae284a5", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5ee1af3-2eab-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775145098, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775145098, "uuid": "1c5d428d-4e3a-431f-9e5a-a1135f5e9df0", "comment": "Malware payload (Mirai)", "value": "21fd37d2477d534a5380596d91bd2acb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775145098, "uuid": "3583cdf8-df09-4c70-af37-c34f74044deb", "comment": "Malware payload (Mirai)", "value": "79f7cc37bf931761a087da2d2998f7ffca5e4a434495f86eea06cf1e34d42c45", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775145098, "uuid": "c611ba51-a8e9-4c2e-9ce3-791968d7f202", "value": "T11C04C70AAFA10EBBDCAFDD3306E90A0239CC945722A53F757A74C524F54A50F5AD3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775145098, "uuid": "3fd394d6-108a-4a78-89eb-5d2c202927ac", "value": "1536:sZY3qkNLGB8ORND2Ez2vLR5BQNx73Sk6rHFc6S5hqg8q0CM0PdMbZX1GCKgYeDET:sZY3HORVnanlc1p0CdMbZlGdPQHq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775145098, "uuid": "270ff5b3-e4c1-4949-a04c-99f6a346ebe1", "value": 181888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775145098, "uuid": "7e075dfb-e39a-4ed0-aca9-fdb29bf96271", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b266723-2eac-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775145295, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775145295, "uuid": "1b949d77-6d49-4c6a-8749-87bf6f6c4d18", "comment": "Malware payload (Mirai)", "value": "10ca536e82aa923cd29eea3d79d2b017", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775145295, "uuid": "2505e0f6-6401-4e23-a8d2-6dcda3be747a", "comment": "Malware payload (Mirai)", "value": "ea30784fdd6b41e70695c26f603a19f4535ea8548bb0b0189728e4b7e531ce4c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775145295, "uuid": "7279f7c0-73b5-40e2-bedc-e01a2c690344", "value": "T1F6142946EB404B13C0D72BB9FA9F43153323DB5897E773069928ABB03B8779A4F625", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775145295, "uuid": "1f4102e7-cc40-47c4-8573-4e3536adc486", "value": "6144:CiDbm+KNe8W8ayGeVOKN387Aq+CHRPV/G7l:CQmXe8W8ayGeVOKpYtt/I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775145295, "uuid": "f3bb05bd-2988-4add-af0b-230632edbf7a", "value": 203746, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775145295, "uuid": "731adfb4-c5d4-4c86-8296-710ae9076852", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6ee9a39-2eac-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775145476, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775145476, "uuid": "aec687f5-522d-474b-8075-f30e187a103f", "comment": "Malware payload (Mirai)", "value": "ef70d872108e9c710c2deef189cf7fea", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775145476, "uuid": "2c63b6f1-228e-4254-b890-146a44030bb0", "comment": "Malware payload (Mirai)", "value": "db5cd5ec74a616f4b4e653dd63d6564a99cb9d073c1dc2d8db192af5c1beb52c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775145476, "uuid": "85a34dcc-0e57-47ff-ab7f-9a7b600feb6d", "value": "T167C349B3D875AF98C614D1B8B0B08F7A6B539A6441871FFE15ABC2B58043D8DF5063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775145476, "uuid": "bfbe4553-b567-4639-8d34-87d826712584", "value": "1536:OYrNKIRQs+Yj3wo2YClKlTbGBPOYG5tsWdfTGwVe0hdmzb85:tNDQs+fLYplSOrfsWRTG4xdmzw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775145476, "uuid": "b9f39e24-203f-4574-b17a-f35843976591", "value": 119024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775145476, "uuid": "d9f103f8-c70b-4ffc-9ee6-cf9787a761bf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "780f791d-2ead-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775145800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775145800, "uuid": "6bcfa4bc-3512-4776-977f-218e55e8bab4", "comment": "Malware payload", "value": "02841ab62fd46bb65966991569c157db", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775145800, "uuid": "bb991023-0f62-4015-be9c-a338d0b28b85", "comment": "Malware payload", "value": "8194de3dd9492cc9b096a3d03de521da61f7dc935a38960e1040e6cfc32a0e75", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775145800, "uuid": "ebe12879-31d7-440a-a8e1-8eb676ae4f1a", "value": "T1AAF2E8A2A7B9573BC0E0633855B22703359A6FE114A0C34FBD550D5E6FD6390AA27B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775145800, "uuid": "d7e2814e-4a32-47d8-8511-ba84df3e3a64", "value": "768:o2P/smyj0oEgAwJ3ySPwjCGvk2gRMRWVJH4TwMIZemnhr://sRjwgAw3ySPsRW6uR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775145800, "uuid": "5f67c1e2-8287-45d6-87b7-5576f77ff92c", "value": 35908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775145800, "uuid": "b96af613-b669-496f-8fbd-e23d17635160", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f2109fa7-2ead-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775146005, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775146005, "uuid": "6356a7a3-5582-4402-892d-7950f5c15b21", "comment": "Malware payload", "value": "57d9d83f911ddfc9b710b2bf942bc83f", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775146005, "uuid": "b0a183a2-d161-4dba-9c4f-2b248ad6209c", "comment": "Malware payload", "value": "57a95149e45ab21c016b9e5d929fe53537978f4a49e10e6e2cb746ed7bf5863e", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775146005, "uuid": "82fd5bfc-c386-400c-babb-2ac49246e0fa", "value": "T12E040DA333014AF7AD77895FBB2A8CED807DBF1043E020F29A5B6995D5E4752C0E56", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775146005, "uuid": "b71185f8-2efc-49bd-bbb0-06e363464782", "value": "3072:p7k8gJEAmQ+p/C6PRyAM2losGnbfuNA8pByK5r:jQt0YALmjh8pH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775146005, "uuid": "969d44d0-fe7c-48c3-a4e4-6ae4348ce717", "value": 174460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775146005, "uuid": "54625b47-c48a-4fbd-b921-fca03228d2e3", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6183e94d-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775146459, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775146459, "uuid": "033d9be9-9bb7-4658-bd4e-02f2717a6cc8", "comment": "Malware payload", "value": "dbc520ea1518748fec9fcfcf29755c30", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775146459, "uuid": "6238b233-80df-452e-805e-6134fd58a492", "comment": "Malware payload", "value": "c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775146459, "uuid": "98d22dd9-6671-4613-aa99-85fd7e61064c", "value": "D2D3128AA536ED54F11B9AF11B3B99907DF5659E82F4D4A4A2CF634312CC343FA4070B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775146459, "uuid": "ba25df91-873d-4707-8b35-e0c78a4c0ae1", "value": "3072:Nc4i0agsmw3Py5CP5HM8EVLUuYtgB5H6oz:Nc/0aNPy54EVAhOae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775146459, "uuid": "0ae25735-8d95-4d64-97dd-a17dc1b410c0", "value": 132860, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "138a189b-2eaf-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775146490, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775146490, "uuid": "2b55801e-f098-4773-ab19-3c0f447a2935", "comment": "Malware payload (Mirai)", "value": "ce601e9b18aefde1768e98c745732200", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775146490, "uuid": "11e4d4e0-727f-4dbd-a73c-94853ab5d7a8", "comment": "Malware payload (Mirai)", "value": "81311e5997d5614d70b47b6ff730f1242582da0bc50975348878564c280a9530", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775146490, "uuid": "a2801575-21e0-46d9-b4b2-bccbdc814ab2", "value": "T1FBD31945F8909F13C6C612BBFB4E428D7B2A17A8D3EA72039D156F21378B55B0E3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775146490, "uuid": "3f96fe44-22b5-44f2-a232-cdbdb7a43ca7", "value": "1536:8IJWGvKDkvbnxfMvh7erd7jsuCIi9nd1pf4Vvt7HFB3HDGWwtk2HQUHl2nwywsAs:8DkvbtkerBjLCIi9l4rRB3HOnwW3I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775146490, "uuid": "2f97991a-2bce-4ce7-88ea-a695e12f0530", "value": 133932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775146490, "uuid": "ca476ccb-a1f8-4d03-b923-519c3100b217", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e1f7d72-2eaf-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775146589, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775146589, "uuid": "087ed0fc-4d39-42f9-b514-b7f53bb6f0af", "comment": "Malware payload (Mirai)", "value": "8bd22e6c761e25ce61567366fd79789f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775146589, "uuid": "9d9c845d-1286-454f-9692-06d59d98c1b7", "comment": "Malware payload (Mirai)", "value": "48c9892a21b88e4fa0235ee89452c6060a5209113149e44de9ff4041386ed292", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775146589, "uuid": "74fa32da-a520-4804-9859-14681786408a", "value": "T15CD33905730C0D47E2672EF43B3B27D193EFDA8221A4FA41255FAA8A91B1D33558AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775146589, "uuid": "e54a9222-6115-4089-9beb-c776c22d9693", "value": "1536:fJ1Sz2nNdV56LxZlcqSZAbHm0BBAfhrCY1m46CQJSIHSG6vA/WCsBJvCjWqI3gTi:vVnNdaLx4qKNcob1m42JSUj/Zi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775146589, "uuid": "09b56f01-e12a-4a0a-aa91-0eebeb081bd7", "value": 136036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775146589, "uuid": "0826b84a-1507-411c-b274-bf220a00ee60", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7fd1ff08-2eaf-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775146672, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775146672, "uuid": "c9a508d0-6283-409c-a716-1a7fdda1a44d", "comment": "Malware payload (Mirai)", "value": "e79cdaf65df2e3349ac418c467d36916", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775146672, "uuid": "e390ba84-cd56-4e98-a38f-085d4dfed8d0", "comment": "Malware payload (Mirai)", "value": "9339cc4f2b1d6adf42c05512cc6f3ec26ed7c6303187b2aaa4f90e8ff7dddc40", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775146672, "uuid": "5044e97a-2a7b-49ed-9314-f7fb7bed35e1", "value": "T10CE319C7F900EEFAF80AE73744534909B130B7A149525A377257393AED3A0D85537E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775146672, "uuid": "7ba18213-2c45-41f8-b364-ad0b5fbed58c", "value": "3072:jyEUQGp5Dt3MAsiRtPmNn8Bf0wUn8WNVajbixLEzERyDvMW:GxSARtPYnvwk8WpLEwyD0W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775146672, "uuid": "36ae7172-dfd8-4b7d-9c7a-9536894a68b1", "value": 154444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775146672, "uuid": "361b1890-2b0b-45c6-9e5e-0dc2e759de82", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "27bcbc43-2eb1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775147383, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775147383, "uuid": "8d4dd44a-285e-4f8f-8e02-ea3e11a09e55", "comment": "Malware payload (Mirai)", "value": "709a1136631fdbd706b76bb981d8fcca", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775147383, "uuid": "7ed4b587-ac7f-454b-ba61-1e0c0b6ed877", "comment": "Malware payload (Mirai)", "value": "eeaca1b194058fb37aeaeef21ab455c2f54b798a1f7128f767bae38e1d7a638f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775147383, "uuid": "74919732-c2a9-478e-964a-911dd4d01193", "value": "T195F0F484B3E73283CDB7B918BD018440625ED787997A6B2C7CD07BADE4D9709A001F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775147383, "uuid": "35812de1-51fb-4a04-acab-8e892b73fb0f", "value": "12:bLqLuhLqL53LqLRNNIhDLqLoKLKaLqLwtLqLcE/D7LqLcHLqL2IhLqLV3LqL4hLh:HqqlqV7qfNI5qvKMqgqHbnqgqyYqB7qk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775147383, "uuid": "9026adf6-53af-43c5-adaf-8002b596d1a9", "value": 636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775147383, "uuid": "6910dd3d-2274-489c-9e23-004d8fbed5a2", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b320e1f-2eb4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775148677, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775148677, "uuid": "5ff5fc93-108f-408b-8396-353179ee52ff", "comment": "Malware payload (Mirai)", "value": "8b46f625506feafe8be7d2c0d583039b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775148677, "uuid": "503c9fa5-64bb-44fa-a637-51516d1836b6", "comment": "Malware payload (Mirai)", "value": "1794dda4c20bd94854d5d6c6ee535f5769d7662dd7130ecd16a27487af94af48", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775148677, "uuid": "a354598f-1bd5-4451-a43a-c0735c014f00", "value": "T13204A75E2F238F7EF6A8873447B74A25975923D623E1E684D1ECC1045F2029E641FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775148677, "uuid": "4bcf588f-9be3-4f6e-9d55-938f4fcac2b9", "value": "3072:v0dWaWnqziCNT6oMUysCz42RseODgHBpwrhkY:MgPnqziCNrfw40gDapwFkY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775148677, "uuid": "353f41b3-4ecc-4b61-b89c-165e3c908d5d", "value": 181888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775148677, "uuid": "b62012f7-4849-4c0e-976b-16bfa47f2f45", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d4b54c3f-2eb4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775148962, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775148962, "uuid": "e82f26f3-99ad-4848-889e-64d2138d3284", "comment": "Malware payload (Mirai)", "value": "94c415f5a1ca4139f0d01dab87dbb106", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775148962, "uuid": "a5924233-11b5-440b-99b7-abf07fa734f3", "comment": "Malware payload (Mirai)", "value": "4a86870712c9738c2782342ca0ec40922d022999f0f3140a8fecf7f001392b78", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775148962, "uuid": "3e76cbfd-75ca-41cc-946d-b3dd5e9642cf", "value": "T17BD3ACA3B34F2491C42607F41BC7975D2A2324018E6B9AE73C5F367E6A375DB58063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775148962, "uuid": "b45e9a03-c107-4916-abe7-3b0e8aa22609", "value": "3072:jUh52qLKdvYjzQ/g0ZO0PWXptDP79OglCt0n6hwZ8lVlq:jUj2q4YjB0M0mtr79dCtq6WZebq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775148962, "uuid": "b4461ac8-efa5-45b2-878e-00302200cd91", "value": 132816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775148962, "uuid": "ef021c15-42e6-4471-bdba-f6ec722eaea6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8add4181-2eb5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1775149267, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775149267, "uuid": "374374ea-ae52-4cb8-a441-31c14f1c6c23", "comment": "Malware payload (Stealc)", "value": "946a9cc6b501d993a108c90ef7d0930d", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775149267, "uuid": "d5641b24-b84d-407b-aeae-d7538b72c4dd", "comment": "Malware payload (Stealc)", "value": "bf24277400cc453d530e4277d3bd24e96c5e409adef6970518bdc59205aa0241", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775149267, "uuid": "2990ac02-5fec-44ba-8dc9-410fe81d5dd9", "value": "T1F9D4AE1275A090B7E17206348D74EB548BBDB8701F61ABCB73C0059AAE716C0AF37B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775149267, "uuid": "b24c27d6-fc2a-4539-bdba-f3222088a278", "value": "8e7a3254c76133d3b7d6e5e7e43e50f4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775149267, "uuid": "482a3c84-b6f7-4897-8b67-643925557dcd", "value": "12288:FUTcoRtexxNFGCRUWqL9NtiXv/JyxBlDetAqxSv8UA:FU7mFlRUVfsXJybUU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775149267, "uuid": "0404f9d6-12e7-4946-bad7-466b3a134da8", "value": 625664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775149267, "uuid": "971d1aca-5a74-4040-bf63-a18592772b83", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94ddfa91-2ec6-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775156586, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775156586, "uuid": "f114fdbe-ac6b-41df-bedb-9571219b33fa", "comment": "Malware payload", "value": "b0449f002413531fcec8ee70a83837f8", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775156586, "uuid": "d621f461-0e73-45d9-af00-89d6ef42c5a5", "comment": "Malware payload", "value": "ee04c3c25cbee4fd131f65239b60c2c94db0428e86607c0685e7c610376b34c6", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775156586, "uuid": "315ac12c-0886-4911-8fa2-4668658154d8", "value": "T108A20806AA56534AF4B1187553B72E356439BE32270D94CFEF900A391274EE0FE373", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775156586, "uuid": "107778b9-e113-4304-8ad8-43a26fb1d606", "value": "d0f945da54f20d8bcaf079f2d6ea9f63", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775156586, "uuid": "8349b648-bd19-4478-aa6e-c42f5d24285f", "value": "384:Hu1OuPf4/S1fUrQFYhJ4JVB0WsNUnwnR:HNuPf4/IUrqY+xsN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775156586, "uuid": "7fab4288-fcdc-49f4-9fdd-d371aa26c539", "value": 22528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775156586, "uuid": "c566ab55-69de-48af-aea2-e2c62f363807", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16d3950a-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775161001, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775161001, "uuid": "fdfdbe73-cdb4-4a16-afb3-5c8b387d0582", "comment": "Malware payload", "value": "4e9b89a618e755926424054b4d1a6953", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775161001, "uuid": "a637a821-ce74-4908-9fd7-b4b73e819ff9", "comment": "Malware payload", "value": "eaa08f7cedc2ed4a97fdff1e549b54726ae32832f1bcf0294b767f983213a157", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775161001, "uuid": "61736bde-a20d-4a00-8bc4-1d018df50950", "value": "9433018623A62EB2D1319DF5A7FCFF89A04A7D949FE91C0A7C213659B47235C28C4C1D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775161001, "uuid": "f9596301-bc24-48b9-9a8d-7ea1c60792f3", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgsX:yYI0ARqw1qAEv7UIFM8oJorFX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775161001, "uuid": "65a13af5-e69a-4a04-b4a7-9da8134c8581", "value": 50680, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ec9a641-2ee0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1775167689, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775167689, "uuid": "e1df8e87-640f-48ca-b145-36c5bfcf1c50", "comment": "Malware payload (Phorpiex)", "value": "9cbd6ae126ef4df50719eba92bfd2d61", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775167689, "uuid": "f5fa99e0-23c8-4915-b95b-b2cfee060142", "comment": "Malware payload (Phorpiex)", "value": "981006af72be89f4b18b8b870aa77ea10a46a9373b621f655ba4a3c37cbfada1", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775167689, "uuid": "657f2653-b050-469c-8734-cf2969243e95", "value": "T150823A0FB9424216D0D100B4A672867BD9B9A87637C864EBF7D48AAD0A686D1FC331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775167689, "uuid": "529ac174-1418-4061-b9af-72def2262ee6", "value": "b8b034a37970476c0e8791d5941c31e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775167689, "uuid": "3b30ea37-52b5-409f-ada5-88d4ae63683b", "value": "384:mI78VGI2VxOwflsx0pu9NHRgqav8U9ci:PHdsx089na0U1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775167689, "uuid": "95ff416d-dbd2-45a8-93a2-36e8d19a3465", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775167689, "uuid": "ddf2d1c1-198c-4fff-9a4d-87d37ed9a537", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775088739, "uuid": "9d40b7e3-2e28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.255.222:46473/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775090355, "uuid": "602ed247-2e2c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.255.222:46473/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775090364, "uuid": "65a33713-2e2c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.59.88:46663/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775090476, "uuid": "a88b005e-2e2c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.244.128:58258/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775091189, "uuid": "512fb3dc-2e2e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.26.106:57329/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775091332, "uuid": "a6ac6d65-2e2e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.armour-inc-down.net/set/?KIDDIONSMODMENU", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775092150, "uuid": "8e0b7f07-2e30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.244.128:58258/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775092387, "uuid": "1bc52fd3-2e31-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://microservisetrue.vip/fwefwe324234234rgeffwehtrwyrhtrhtqwfqwd31443wefefwwfer3232fewwefwefwefqgrqwtherergqefwefqweqfwqf32fefwsda/uploads/EFewefwewFEW342234423234feWEEFWWefewefweffewwefEWF.php?file=amp.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775092688, "uuid": "cedc82c4-2e31-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://microservisetrue.vip/fwefwe324234234rgeffwehtrwyrhtrhtqwfqwd31443wefefwwfer3232fewwefwefwefqgrqwtherergqefwefqweqfwqf32fefwsda/uploads/EFewefwewFEW342234423234feWEEFWWefewefweffewwefEWF.php?file=333.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775092875, "uuid": "3e3038bd-2e32-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.165.93:49191/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775093115, "uuid": "cd99fa82-2e32-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.117.10:47859/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775093248, "uuid": "1c846a5b-2e33-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.188.55:60772/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775094128, "uuid": "29234e11-2e35-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.188.55:60772/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775094508, "uuid": "0bec9c2e-2e36-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.127.241:56251/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775095091, "uuid": "66f30f7f-2e37-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.110.125.145/main_arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775095091, "uuid": "66f536d8-2e37-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.110.125.145/main_arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775095091, "uuid": "66f53a37-2e37-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.110.125.145/main_arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775095101, "uuid": "6d05c7a6-2e37-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.112.124.72/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775095163, "uuid": "92616f0a-2e37-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.110.125.145/main_x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775095163, "uuid": "926176f7-2e37-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.110.125.145/main_mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775095163, "uuid": "92618f2c-2e37-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.110.125.145/main_sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775095163, "uuid": "9263f120-2e37-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.110.125.145/main_ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775095163, "uuid": "92661204-2e37-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.110.125.145/main_x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775095163, "uuid": "92672b46-2e37-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.110.125.145/main_mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775095163, "uuid": "926992db-2e37-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.110.125.145/main_m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775095688, "uuid": "cad33001-2e38-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.12.47:59105/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775096419, "uuid": "7e8181e1-2e3a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.91.244:57522/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775096777, "uuid": "53f8545b-2e3b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.154.51:40724/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775096827, "uuid": "71ee5eb0-2e3b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.109.227.174:60501/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775097547, "uuid": "1f190c44-2e3d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.12.47:59105/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775097789, "uuid": "af9af050-2e3d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.190.184.148:56177/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775097857, "uuid": "d827c7f7-2e3d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.201.4:44608/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775098034, "uuid": "4184b866-2e3e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.91.244:57522/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775098147, "uuid": "84e3a137-2e3e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.201.4:44608/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775098341, "uuid": "f8892deb-2e3e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.105.178:46538/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775099825, "uuid": "6d2101ab-2e42-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.66.90:49106/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775099913, "uuid": "a13885f3-2e42-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.101.126:32921/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775100126, "uuid": "204c671e-2e43-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.68.239:54704/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775100127, "uuid": "20bb0df6-2e43-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.226.100:43356/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775100800, "uuid": "b1e63a64-2e44-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.101.126:32921/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775101462, "uuid": "3c77cafe-2e46-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.114.10.28:58849/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775101627, "uuid": "9edaac26-2e46-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.226.100:43356/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775102227, "uuid": "0495d902-2e48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.199.224:47501/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775102527, "uuid": "b784941a-2e48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.199.224:47501/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775102947, "uuid": "b18a1569-2e49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.78.200:33432/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775103387, "uuid": "b8199cbd-2e4a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.42.91.119:44019/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775103428, "uuid": "d02aa958-2e4a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.23.60:48522/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775104401, "uuid": "14a38f70-2e4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.136.242:34258/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775104927, "uuid": "4e18912b-2e4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.23.60:48522/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775104929, "uuid": "4ed762e0-2e4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.207.173:51058/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775105362, "uuid": "514b9d77-2e4f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.127.167:34852/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775105421, "uuid": "747ccb9b-2e4f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.0.211:47285/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775105655, "uuid": "ffd3a48c-2e4f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.214.111:49782/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775105720, "uuid": "26530a16-2e50-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.180.80.59:59135/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775106258, "uuid": "678553ff-2e51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.6.173:35879/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775106726, "uuid": "7e42da3d-2e52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.207.173:51058/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775106858, "uuid": "cc9f60c6-2e52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.62.253:53303/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775107036, "uuid": "36fcb6fc-2e53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.21:35203/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775107150, "uuid": "7aff055b-2e53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.127.167:34852/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775107327, "uuid": "e4a35e31-2e53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://168.195.7.105:50498/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775107391, "uuid": "0ad8662e-2e54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.214.111:49782/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775108474, "uuid": "8fdcbaae-2e56-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.109.227.174:60501/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775108828, "uuid": "635c1a2e-2e57-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://168.195.7.105:50498/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775109019, "uuid": "d506bdee-2e57-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.165.93:49191/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775109487, "uuid": "eb9e9c66-2e58-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.52.142.194:43032/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775109913, "uuid": "e9df5cd7-2e59-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.110.125.145/main_arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775109976, "uuid": "0f238446-2e5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.177.108.216:51130/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775110325, "uuid": "df9e013e-2e5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.212.47:32862/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775110460, "uuid": "2fbea718-2e5b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.228.252:57990/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775110521, "uuid": "544abe9e-2e5b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.201.196:49716/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775110627, "uuid": "93793265-2e5b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.30.6:35042/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775110934, "uuid": "4a8c6d05-2e5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.52.148/rebirth.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775110936, "uuid": "4b59a5e5-2e5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.201.196:49716/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775110936, "uuid": "4b5cba46-2e5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.52.148/rebirth.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775110940, "uuid": "4dd83a1a-2e5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.52.148/rebirth.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775110940, "uuid": "4dec055a-2e5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.52.148/rebirth.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775111164, "uuid": "d3bc2e0c-2e5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://52.4.142.122:8880/stager_linux_$g", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775111167, "uuid": "d537443c-2e5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://i.postimg.cc/yd1XsWRW/image-1.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775111174, "uuid": "d98fffea-2e5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.4.162:49402/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775111827, "uuid": "5ea975f0-2e5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.212.47:32862/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775111958, "uuid": "ac7fd397-2e5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.228.252:57990/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775112072, "uuid": "f0d7513d-2e5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.4.162:49402/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775112141, "uuid": "19c9275c-2e5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.97.200.199:47761/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775113170, "uuid": "7f1556ec-2e61-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.26.189:55645/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775113875, "uuid": "238efbd5-2e63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.133.53:47925/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775113941, "uuid": "4a853d8a-2e63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.97.200.199:47761/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775114057, "uuid": "9014d3eb-2e63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.233.117.15:51846/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775114539, "uuid": "af0f99eb-2e64-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.133.53:47925/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775115425, "uuid": "bef19efd-2e66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.148.90:38702/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775115433, "uuid": "c4295738-2e66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://47.160.151.251:60697/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775115558, "uuid": "0e785d2e-2e67-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.163.200:48936/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775116325, "uuid": "d7e1a080-2e68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.88.99:42834/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775116626, "uuid": "8b10361e-2e69-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fiker.cattermicoffa.sbs/chrome_300_percent.pak", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775116642, "uuid": "94c5b15c-2e69-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.78.58:40510/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775116881, "uuid": "2320b176-2e6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.3.227:48772/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775116937, "uuid": "44a2a48c-2e6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.116.65:58037/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775117114, "uuid": "add508df-2e6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.163.200:48936/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775117537, "uuid": "aa27bb20-2e6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.116.65:58037/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775117538, "uuid": "aa904795-2e6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.183.249:52912/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775118071, "uuid": "e866dd64-2e6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.3.227:48772/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775118133, "uuid": "0d1426e4-2e6d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.234.248.74:43372/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775118198, "uuid": "342a4450-2e6d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.108.72.54:39609/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775118260, "uuid": "59410fd7-2e6d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.4.64:41905/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775118679, "uuid": "52fcc61d-2e6e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.108.72.54:39609/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775118920, "uuid": "e25a47c8-2e6e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.6.55:49567/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775119025, "uuid": "2104f170-2e6f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/6728144278/S04rtaH.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775119513, "uuid": "43c89374-2e70-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.93.89:52466/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775119699, "uuid": "b2c8d78c-2e70-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.94.142.84:59168/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775119702, "uuid": "b489a77e-2e70-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.229.241:44831/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775120058, "uuid": "88fe0218-2e71-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.4.64:41905/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775120294, "uuid": "152e3900-2e72-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.6.55:49567/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775120764, "uuid": "2dab114a-2e73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/7044575709/MyFXFBN.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775121077, "uuid": "e7d3386d-2e73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.93.89:52466/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775121496, "uuid": "e1fcc9d6-2e74-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.35.106:46207/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775121741, "uuid": "73c96d1e-2e75-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.51.197:60699/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775122027, "uuid": "1e4e6e72-2e76-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.88.136.194:44815/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775122063, "uuid": "33c1b04e-2e76-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.80.214:45412/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775122104, "uuid": "4c3c79e8-2e76-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.224.33.43:33735/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775122169, "uuid": "72d2a68b-2e76-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.0.215.182:35556/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775122640, "uuid": "8b9f68c5-2e77-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.97.175:33557/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775122766, "uuid": "d6a5b551-2e77-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.62.253:53303/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775122927, "uuid": "367a42f7-2e78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.88.136.194:44815/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775123124, "uuid": "ac00475b-2e78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.35.106:46207/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775123430, "uuid": "62bf9d04-2e79-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.51.197:60699/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775123479, "uuid": "7ffca883-2e79-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.224.33.43:33735/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775123593, "uuid": "c3aa1fd9-2e79-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.245.45.101:38557/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775123778, "uuid": "32225013-2e7a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.166.37.123:34509/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124322, "uuid": "761dc9e4-2e7b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.157.55.73:39040/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124323, "uuid": "76a476f2-2e7b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.97.175:33557/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124668, "uuid": "4498f87c-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.245.45.101:38557/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124789, "uuid": "8cca1473-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.110.204/armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124794, "uuid": "8f4b8393-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/huhu/titanjr.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124799, "uuid": "92c6f3dc-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.110.204/armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "9302d534-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.110.204/i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "93119277-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.110.204/arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "93229ba9-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/huhu/titanjr.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "9323e03f-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/huhu/titanjr.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "93273ac8-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.110.204/sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "9327da26-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.110.204/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "93282a53-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/huhu/titanjr.ppc440", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "9329437a-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/huhu/titanjr.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "93295284-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/huhu/titanjr.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "932a2a29-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.110.204/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "932a3b1a-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/huhu/titanjr.mipsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "932d64d4-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/huhu/titanjr.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "9347fcb8-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.110.204/armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "9355b14c-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/huhu/titanjr.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "9355d17b-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.110.204/i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "93574423-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/huhu/titanjr.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "9358d7e9-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/huhu/titanjr.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "935ca110-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/huhu/titanjr.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "935d301e-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/huhu/titanjr.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "935e4fac-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/huhu/titanjr.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "93632268-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/huhu/titanjr.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "936a055a-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/huhu/titanjr.x86_32", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124800, "uuid": "936aa833-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.110.204/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124801, "uuid": "93965fb3-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.110.204/i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124801, "uuid": "93b748b2-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.110.204/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124801, "uuid": "93be3323-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.110.204/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124801, "uuid": "93f54aa6-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.110.204/powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124804, "uuid": "95cf9e4f-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.110.204/armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124871, "uuid": "bd3b5e2b-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.231.222:34247/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775124927, "uuid": "df046643-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.185.66:37177/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775125400, "uuid": "f8825c64-2e7d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.30.247:54987/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775126243, "uuid": "ef034fb9-2e7f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.134.38:45659/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775126424, "uuid": "5ada45c2-2e80-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.226.53:42396/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775127247, "uuid": "45cac6a2-2e82-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://galaxis.fun/File/GaI%D0%B0%D1%85is.zip", "Tag": [ { "name": "pw-galaxis", "colour": "#b8b9c4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775127324, "uuid": "737c2444-2e82-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.89.45:38805/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775127977, "uuid": "f89bbe69-2e83-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.134.38:45659/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775128217, "uuid": "881d0163-2e84-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.226.53:42396/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775128365, "uuid": "dff7db78-2e84-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.80.214:45412/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775128927, "uuid": "2ee6fb97-2e86-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.202.35:47347/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775129213, "uuid": "d94d4e94-2e86-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.20.200:45955/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775129833, "uuid": "4b389780-2e88-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.26.106:57329/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775129925, "uuid": "819b762b-2e88-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.231.222:34247/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130319, "uuid": "6ce50029-2e89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.137.153.129:53872/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130426, "uuid": "acc5b006-2e89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.202.35:47347/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130427, "uuid": "ad2cc00e-2e89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.243.29:42407/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130441, "uuid": "b5b7a931-2e89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/main_arm6", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130441, "uuid": "b5bc6efc-2e89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/main_sh4", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130441, "uuid": "b5bc8276-2e89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/main_arm5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130442, "uuid": "b5c80978-2e89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/main_mpsl", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130442, "uuid": "b5c8263d-2e89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/main_spc", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130442, "uuid": "b5c83a39-2e89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/main_x86", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130442, "uuid": "b5c87762-2e89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/main_mips", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130442, "uuid": "b5c91f9b-2e89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/main_x86_64", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130442, "uuid": "b5c9716b-2e89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/main_arm7", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130442, "uuid": "b5c9766a-2e89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/main_m68k", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130442, "uuid": "b5cc8698-2e89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/titanjr.x86_32", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130442, "uuid": "b5cf72c0-2e89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/titanjr.arm", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130442, "uuid": "b5cf94b5-2e89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/main_arm", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130442, "uuid": "b5d11cd5-2e89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/titanjr.x86_64", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130442, "uuid": "b5d1260e-2e89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/titanjr.sh4", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130442, "uuid": "b5d62286-2e89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/titanjr.mips", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130442, "uuid": "b5db89a5-2e89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/titanjr.i486", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130443, "uuid": "b683d2e7-2e89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/titanjr.spc", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130443, "uuid": "b683d617-2e89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/titanjr.mipsl", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130443, "uuid": "b683dd04-2e89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/titanjr.i686", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130443, "uuid": "b683f6b0-2e89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/titanjr.ppc440", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130443, "uuid": "b693960d-2e89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/main_ppc", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130445, "uuid": "b7b4d9a6-2e89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/titanjr.ppc", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130493, "uuid": "d485ee03-2e89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/titanjr.arm7", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130541, "uuid": "f14eb226-2e89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.20.200:45955/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130550, "uuid": "f63a35d1-2e89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/titanjr.arm5", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130550, "uuid": "f63a37cc-2e89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/titanjr.m68k", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130613, "uuid": "1c4494d4-2e8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/titanjr.arm6", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130613, "uuid": "1c44ce53-2e8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/titanjr.arc", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130879, "uuid": "bab2b067-2e8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.121.227:38044/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130920, "uuid": "d313c802-2e8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.78/nuclear.arm6", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130920, "uuid": "d31e1d08-2e8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.78/nuclear.spc", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130923, "uuid": "d4c08033-2e8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.78/nuclear.arc", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130923, "uuid": "d4c08054-2e8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.78/nuclear.i686", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130923, "uuid": "d4c1714c-2e8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.78/nuclear.sh4", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130923, "uuid": "d4c428b4-2e8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.78/nuclear.x86", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130923, "uuid": "d4c5ea3c-2e8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.78/nuclear.x86_64", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130923, "uuid": "d4ca7b3b-2e8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.78/nuclear.arm7", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130923, "uuid": "d4caa776-2e8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.78/nuclear.arm", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130923, "uuid": "d4cac17f-2e8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.78/nuclear.arm5", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130923, "uuid": "d4cf5a14-2e8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.78/nuclear.m68k", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130923, "uuid": "d4cf898f-2e8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.78/nuclear.mpsl", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130923, "uuid": "d4d8f53d-2e8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.78/nuclear.mips", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775130923, "uuid": "d4db0d62-2e8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.78/nuclear.ppc", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775131038, "uuid": "19231c74-2e8b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/all.sh", "Tag": [ { "name": "87-121-84-19", "colour": "#608471", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775131100, "uuid": "3e0e5c9d-2e8b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.86.165:57357/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775131154, "uuid": "5e4acd61-2e8b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.18/c.sh", "Tag": [ { "name": "87-121-84-18", "colour": "#11529b", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775131155, "uuid": "5ecfb73d-2e8b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.18/lol.sh", "Tag": [ { "name": "87-121-84-18", "colour": "#11529b", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775131217, "uuid": "83d99d50-2e8b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.18/multi/bins/mipsel", "Tag": [ { "name": "87-121-84-18", "colour": "#11529b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775131217, "uuid": "83ddc28a-2e8b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.18/multi/bins/arm7", "Tag": [ { "name": "87-121-84-18", "colour": "#11529b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775131217, "uuid": "83e05313-2e8b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.18/multi/bins/mips", "Tag": [ { "name": "87-121-84-18", "colour": "#11529b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775131217, "uuid": "83fde3af-2e8b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.18/wget.sh", "Tag": [ { "name": "87-121-84-18", "colour": "#11529b", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775131266, "uuid": "a128ab90-2e8b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.18/multi/bins/x86_64", "Tag": [ { "name": "87-121-84-18", "colour": "#11529b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775131266, "uuid": "a138608b-2e8b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.18/multi/bins/arm5", "Tag": [ { "name": "87-121-84-18", "colour": "#11529b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775131751, "uuid": "c22ff408-2e8c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.121.227:38044/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775131936, "uuid": "305a9e21-2e8d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.206.203:44439/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775131998, "uuid": "555651f2-2e8d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.27.87:39856/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775131998, "uuid": "55b519b7-2e8d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.137.153.129:53872/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775132530, "uuid": "92a663d7-2e8e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.243.29:42407/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775132957, "uuid": "912e231e-2e8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.189.182:36703/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775133325, "uuid": "6c94e630-2e90-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.214.238.164:53862/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775133435, "uuid": "ae50c14e-2e90-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.61.219:48586/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775133622, "uuid": "1d7876f7-2e91-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.50.214:54675/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775134042, "uuid": "179ee7c3-2e92-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.1.75:42849/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775134100, "uuid": "3a2edcb3-2e92-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.110.204/mips64", "Tag": [ { "name": "195-178-110-204", "colour": "#b3a020", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775134705, "uuid": "a30fb6a8-2e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.50.214:54675/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775135599, "uuid": "b7ba83a6-2e95-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.24.172:45475/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775135659, "uuid": "dbdd1a2c-2e95-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.24.172:45475/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775135900, "uuid": "6b89163e-2e96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.36.202:52253/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775136022, "uuid": "b3d2d9c1-2e96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.122.224:40114/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775136077, "uuid": "d4ddc35b-2e96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.122.224:40114/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775136128, "uuid": "f34b1cc5-2e96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.171.177.193:41280/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775136447, "uuid": "b18061e4-2e97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.145.1:46980/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775137210, "uuid": "7853f29c-2e99-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.58.152:54537/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775137699, "uuid": "9bc79755-2e9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.240.70:44856/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775137762, "uuid": "c1098f98-2e9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.145.1:46980/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775137817, "uuid": "e1d40e23-2e9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.36.202:52253/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775137823, "uuid": "e53117f2-2e9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.147.80:34068/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775138229, "uuid": "d75bca78-2e9b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.171.177.193:41280/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775138297, "uuid": "00169a5a-2e9c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.234.248.74:43372/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775138829, "uuid": "3d410ef5-2e9d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.58.152:54537/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775138899, "uuid": "67069ff6-2e9d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.70.11:35060/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775139321, "uuid": "623286ac-2e9e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.147.80:34068/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775139441, "uuid": "a9ed4787-2e9e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.172.186.141:56628/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775139500, "uuid": "cd509fd5-2e9e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.132.142:54242/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140099, "uuid": "31d2dd6b-2ea0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.240.70:44856/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140157, "uuid": "547b8373-2ea0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.70.11:35060/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140455, "uuid": "0617b70f-2ea1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.132.142:54242/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140926, "uuid": "1f231692-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.165.215.116/Porcate.cmd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140926, "uuid": "1f333479-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.165.215.116/JNG1.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140927, "uuid": "1f73648c-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://audipoint.cz/downloads/kontakt.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140927, "uuid": "1f7b786b-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://audipoint.cz/downloads/info.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140927, "uuid": "1f88daf0-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.165.215.116/JNG2.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140928, "uuid": "204ebf86-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mailer-kjermjs.com/WORDPRESS%202026.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140928, "uuid": "205a692a-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.206.203:44439/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140928, "uuid": "20639668-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://keilo-jermailer.com/WORDPRESS%202026.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140928, "uuid": "2076b851-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://e0-adobemodule-pdreaderl-w002-0llx00-uv0a0acr0bt-patch-dl0.pages.dev/portable_reader_acrbat_v23_01_p2.vbs", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140929, "uuid": "20b081cf-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://racing-shop-schuller.de/webRTC_driver_20260111_x64.exe", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140929, "uuid": "20b4a41e-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.165.215.116/imbosomed.deploy", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140929, "uuid": "20b8f6d5-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/babka98/horinis/refs/heads/main/lykis.msi", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140931, "uuid": "21cc14bd-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://app-trust-wallet.com/trust.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140931, "uuid": "21ed53d7-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mailer-kjermjs.net/WORDPRESS%202026.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140931, "uuid": "22246be0-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.az-partners.net/apps/driver-hub/download?ap=28&driver-hub-install.exe.", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140932, "uuid": "226ccbd2-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-ec081eb0fab74385a17d8d77afeeda3b.r2.dev/Rsvp_invite%23903388.exe", "Tag": [ { "name": "DattoRMM", "colour": "#167832", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140932, "uuid": "22d0109f-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lejrmakei.net/WORDPRESS%202026.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140936, "uuid": "24ee9e48-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://themaintechnician.us/Bin/ScreenConnect.ClientSetup.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140942, "uuid": "287db593-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.172.186.141:56628/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140989, "uuid": "44945574-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://jin.com.my/patch/1117.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775140998, "uuid": "4a20c20c-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://audipoint.cz/downloads/Burst.exe", "Tag": [ { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775141127, "uuid": "96bf0975-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.101.92.130:53222/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775141826, "uuid": "37b2adb9-2ea4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.249.4.20:35913/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775142436, "uuid": "a3416431-2ea5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.252.128:44711/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775142668, "uuid": "2d19cf83-2ea6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.194.234:53768/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775142790, "uuid": "76015afe-2ea6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.72.176:58953/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775142917, "uuid": "c1c7987a-2ea6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.73.34:44849/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775143027, "uuid": "037fac11-2ea7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.116.56.92:21885/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775143228, "uuid": "7b2f66b6-2ea7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.212.118:42550/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775144121, "uuid": "8f7ad057-2ea9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.252.128:44711/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775144122, "uuid": "8ff66de0-2ea9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.11.87:37644/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775144245, "uuid": "d8fed985-2ea9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.194.234:53768/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775144298, "uuid": "f8f14dc5-2ea9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.72.176:58953/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775144647, "uuid": "c92e4e58-2eaa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.191.137.44:52649/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775145493, "uuid": "c0e68d9b-2eac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.191.137.44:52649/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775145607, "uuid": "04ea5160-2ead-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/8042875554/jv3aQju.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775145725, "uuid": "4ba14ba1-2ead-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/7709864361/n1XRh0P.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775145805, "uuid": "7b3f22cd-2ead-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.11.87:37644/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775146459, "uuid": "00d40749-2eaf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.208.17:54537/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775146460, "uuid": "014c6be2-2eaf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.184.173:40185/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775146831, "uuid": "deab3401-2eaf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.84.58:53869/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775147189, "uuid": "b3e7c039-2eb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.217.198.91:45909/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775147361, "uuid": "1a93dc04-2eb1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.116.56.92:21885/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775147903, "uuid": "5d758779-2eb2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.208.17:54537/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775148561, "uuid": "e5e04bfa-2eb3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.136.22.57:40679/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775149267, "uuid": "8ae9c965-2eb5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.109/st.exe", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775150541, "uuid": "822799e4-2eb8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.112.193:33574/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775150649, "uuid": "c28c2203-2eb8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.129.124:50675/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775150833, "uuid": "2fc88a17-2eb9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.174.48:52075/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775150948, "uuid": "74db70db-2eb9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.38.165:49027/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775152216, "uuid": "68a14237-2ebc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.174.48:52075/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775153657, "uuid": "c38d5e4e-2ebf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.166.170.106:3536/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775154798, "uuid": "6b998612-2ec2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.68.197:40059/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775154971, "uuid": "d28d913a-2ec2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.28.179.42:57783/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775155215, "uuid": "63e85396-2ec3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.166.170.106:3536/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775155330, "uuid": "a831d126-2ec3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.157.168:49936/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775155565, "uuid": "34690bf7-2ec4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/8408827406/f1srZt6.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775156120, "uuid": "7f4a4db8-2ec5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.252.165:36677/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775156359, "uuid": "0e09f87a-2ec6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.68.197:40059/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775156528, "uuid": "7254f65a-2ec6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.103.54:53082/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775156540, "uuid": "79a03cdc-2ec6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.19.241:40081/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775156586, "uuid": "94e949a4-2ec6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.109/peinf.exe", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775156886, "uuid": "4808639b-2ec7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.163.184.136:49029/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775156887, "uuid": "4893b23d-2ec7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.153.46:54050/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775157019, "uuid": "96f8bb3d-2ec7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.92.12:47602/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775157071, "uuid": "b641cce3-2ec7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.0.211:47285/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775157427, "uuid": "8a221606-2ec8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.157.168:49936/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775157728, "uuid": "3de352bc-2ec9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.59.213:33143/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775158457, "uuid": "f094b10e-2eca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.153.46:54050/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775158508, "uuid": "0e8a944e-2ecb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.15.1:48126/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775158628, "uuid": "5675cad8-2ecb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.19.241:40081/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775159001, "uuid": "346b8483-2ecc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.219.74.77:58121/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775161050, "uuid": "f9ca6afd-2ed0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.56.146.69:35466/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775161327, "uuid": "9ec87ae2-2ed1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.78.200:33432/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775161688, "uuid": "764c3ec0-2ed2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.214.185:59599/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775161689, "uuid": "76fae2d5-2ed2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.86.71.216:43364/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775161925, "uuid": "03660a16-2ed3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/6728144278/5nhlM0r.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775162659, "uuid": "b8d4b23d-2ed4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.203.170.228:55528/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775163141, "uuid": "d816ccff-2ed5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.86.83:35225/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775163198, "uuid": "fa2c513a-2ed5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.21.147:46171/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775163310, "uuid": "3ccf55a8-2ed6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.13.217:42757/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775163365, "uuid": "5de0b713-2ed6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/77546367/5akgVVn.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775163365, "uuid": "5df0ae98-2ed6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/8536096438/X9OhMaZ.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775163426, "uuid": "820a3d29-2ed6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.214.185:59599/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775163428, "uuid": "8369b036-2ed6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.9.1:43745/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775163965, "uuid": "c3173b72-2ed7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/unique5/random.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775164031, "uuid": "ea6afcec-2ed7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.172.194:45672/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775164087, "uuid": "0c190a56-2ed8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.233.64:45200/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775164757, "uuid": "9b6396f1-2ed9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.13.217:42757/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775164820, "uuid": "c0b96843-2ed9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.9.1:43745/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775164866, "uuid": "dc5e8d42-2ed9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.86.83:35225/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775164927, "uuid": "00ed6d83-2eda-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.124.219:42184/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775165228, "uuid": "b43dbef2-2eda-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.214.109.147:37361/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775165318, "uuid": "e9b22699-2eda-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://securrty.cfd/files/EventVPcard_PU1KQZvw_installer.msi", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775165530, "uuid": "68415f52-2edb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.233.64:45200/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775165717, "uuid": "d7aa75b4-2edb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.172.194:45672/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775165827, "uuid": "19594c47-2edc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.231.132:33070/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775165827, "uuid": "195b230f-2edc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.124.219:42184/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775166313, "uuid": "3b1c05e2-2edd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.246.47:36823/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775166428, "uuid": "7f4ed102-2edd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.88.91.26:47182/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775167326, "uuid": "96963760-2edf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.231.132:33070/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775167936, "uuid": "01f5be57-2ee1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.73.34:44849/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775168056, "uuid": "49fca7fd-2ee1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.22.175.162:57210/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775168286, "uuid": "d30e8ea9-2ee1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.246.47:36823/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775168829, "uuid": "1634676c-2ee3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.239.123:55029/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775169127, "uuid": "c857f600-2ee3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.137.156.231:38338/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775169314, "uuid": "37c53f93-2ee4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.189.182:36703/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775169739, "uuid": "34fce1cc-2ee5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.234.25:58113/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775170028, "uuid": "e165161e-2ee5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.239.123:55029/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775170029, "uuid": "e18b6f11-2ee5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.242.118:36562/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775170627, "uuid": "460c4bc0-2ee7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.137.156.231:38338/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775170694, "uuid": "6e3f778d-2ee7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.157.129:55169/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775170927, "uuid": "f93ce8ba-2ee7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.169.156:39346/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775170929, "uuid": "f9e9fd6f-2ee7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.144.231:58457/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775172256, "uuid": "1157080f-2eeb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.187.37.109:59153/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775172726, "uuid": "297223ab-2eec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.144.231:58457/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775172736, "uuid": "2ef9cf3a-2eec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.187.37.109:59153/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775172791, "uuid": "4fd5f3c5-2eec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.187.101.68:41533/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775173032, "uuid": "dfc7a188-2eec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.88.48:55791/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775173274, "uuid": "70251fbd-2eed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.193.94:38189/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775173453, "uuid": "da5834b2-2eed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.248.234:56787/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775173816, "uuid": "b30fe239-2eee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.109.227.235:55274/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775173927, "uuid": "f50ab5fd-2eee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.249.194.64:58270/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775173993, "uuid": "1cb1d7da-2eef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.234.25:58113/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775174227, "uuid": "a8138994-2eef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.88.48:55791/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775174294, "uuid": "cfcdf593-2eef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.248.234:56787/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775174351, "uuid": "f1d43c01-2eef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.187.101.68:41533/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775168044, "uuid": "42bbbb87-2ee1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.22.175.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775118187, "uuid": "2d57351b-2e6d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.108.72.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775139425, "uuid": "a086e09a-2e9e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.172.186.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775119684, "uuid": "aa053ae2-2e70-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.94.142.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775113865, "uuid": "1d1d1b8a-2e63-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.186.133.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775173445, "uuid": "d58da48d-2eed-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.186.248.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775142907, "uuid": "bb8b3ee4-2ea6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.186.73.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775172245, "uuid": "0aabb596-2eeb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.187.37.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775122085, "uuid": "411d6f26-2e76-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.224.33.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775116924, "uuid": "3cccd486-2e6a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.225.116.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775131925, "uuid": "29c6274b-2e8d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.225.206.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775146807, "uuid": "d02b3dc5-2eaf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.225.84.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775161025, "uuid": "eae8b701-2ed0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.56.146.69", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130306, "uuid": "64c71b22-2e89-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.137.153.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775169125, "uuid": "c6ec9164-2ee3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.137.156.231", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775135586, "uuid": "b050e272-2e95-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.24.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775099884, "uuid": "90380342-2e42-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.239.101.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775093225, "uuid": "0f0140b5-2e33-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.188.55", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775122025, "uuid": "1cef3048-2e76-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.80.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775093106, "uuid": "c7f6c8d5-2e32-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.229.117.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775114044, "uuid": "87f98d49-2e63-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.233.117.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775110445, "uuid": "26e295e7-2e5b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.228.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775164024, "uuid": "e66642fe-2ed7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.172.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775142665, "uuid": "2b5ac004-2ea6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.194.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775164084, "uuid": "0a866cd7-2ed8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.233.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775163424, "uuid": "80dcf8d3-2ed6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.9.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775170925, "uuid": "f7c9745d-2ee7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.144.231", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775157725, "uuid": "3bfe2e60-2ec9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.59.213", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775090465, "uuid": "a1de8c32-2e2c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.192.244.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775094486, "uuid": "fe7abda3-2e35-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.195.127.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775119506, "uuid": "3fcb2168-2e70-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.93.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775111164, "uuid": "d37acbc1-2e5c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.4.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775133306, "uuid": "6150ff81-2e90-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.214.238.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775133606, "uuid": "143972cc-2e91-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.50.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775090344, "uuid": "59eee9ff-2e2c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.59.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775113145, "uuid": "70300a9e-2e61-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.26.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775133425, "uuid": "a7d43ba5-2e90-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.61.219", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775115544, "uuid": "063bb083-2e67-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.243.163.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775101445, "uuid": "32642731-2e46-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.114.10.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775166308, "uuid": "379b7f34-2edd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.117.246.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775142425, "uuid": "9c78f44a-2ea5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.117.252.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775170025, "uuid": "df88502d-2ee5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.185.242.118", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775173024, "uuid": "db2412a7-2eec-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.88.48", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775118125, "uuid": "084e73b3-2e6d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.234.248.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775139485, "uuid": "c3e6c054-2e9e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.129.132.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775121726, "uuid": "6b08dad5-2e75-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.51.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775146445, "uuid": "f8a216b3-2eae-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.184.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775118247, "uuid": "518f47b4-2e6d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.4.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775144105, "uuid": "85fca522-2ea9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.11.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775150524, "uuid": "77e33725-2eb8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.94.112.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775123765, "uuid": "2a5d480d-2e7a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.166.37.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775155325, "uuid": "a56cb518-2ec3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.147.157.168", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775143025, "uuid": "026344c8-2ea7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.116.56.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775123585, "uuid": "bef8edaa-2e79-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.245.45.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775096405, "uuid": "7676db11-2e3a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.91.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775097845, "uuid": "d07d8eab-2e3d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.201.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775150945, "uuid": "72d42f5a-2eb9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.38.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130844, "uuid": "a59fd1ba-2e8a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.121.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775100125, "uuid": "1f7e1bde-2e43-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.226.100", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775105345, "uuid": "46f212e1-2e4f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.127.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775105407, "uuid": "6c11133e-2e4f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.0.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775092865, "uuid": "3822d9b3-2e32-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.165.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775172784, "uuid": "4bc2ee6c-2eec-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.187.101.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124785, "uuid": "8a4ef6af-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "195.178.110.204", "Tag": [ { "name": "195-178-110-204", "colour": "#b3a020", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775163184, "uuid": "f1f850cd-2ed5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.21.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775129165, "uuid": "bd2f8998-2e86-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.20.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775103425, "uuid": "ce94748a-2e4a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.23.60", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775122145, "uuid": "64bc9113-2e76-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.0.215.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775161684, "uuid": "73bef86f-2ed2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.214.185", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775162645, "uuid": "b0473d93-2ed4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.203.170.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775148546, "uuid": "dcaaa597-2eb3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.136.22.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124906, "uuid": "d2463c17-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.185.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775136006, "uuid": "aab5db3f-2e96-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.122.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775163305, "uuid": "3a179310-2ed6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.13.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775102224, "uuid": "02f92aa8-2e48-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.199.224", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775088725, "uuid": "94c54ec6-2e28-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.255.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775158984, "uuid": "2a97dc48-2ecc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.219.74.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775156525, "uuid": "7101fbfa-2ec6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.103.54", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775164925, "uuid": "ff876a57-2ed9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.124.219", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775128925, "uuid": "2dcae0b6-2e86-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.202.35", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775106844, "uuid": "c491ff11-2e52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.62.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775173924, "uuid": "f38050f2-2eee-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.249.194.64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775119684, "uuid": "aa05223f-2e70-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.70.229.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775112126, "uuid": "10e4ba5e-2e5f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.97.200.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775154965, "uuid": "cecbe6bc-2ec2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.28.179.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775166426, "uuid": "7e2b4354-2edd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.88.91.26", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775150824, "uuid": "2ae576fc-2eb9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.174.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775169725, "uuid": "2c876c07-2ee5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.234.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775124845, "uuid": "adec3904-2e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.231.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775134025, "uuid": "0db6423a-2e92-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.237.1.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775106245, "uuid": "5f650375-2e51-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.6.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775121485, "uuid": "db1e5b10-2e74-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.6.35.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775104385, "uuid": "0ac20383-2e4d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.87.136.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775156106, "uuid": "772b5cb2-2ec5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.87.252.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140926, "uuid": "1ec115dc-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.165.215.116", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775153644, "uuid": "bb577307-2ebf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.166.170.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775111164, "uuid": "d379d07e-2e5c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "52.4.142.122", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775156525, "uuid": "710215fe-2ec6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.47.19.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775141106, "uuid": "8a5e3eb0-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.101.92.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775109965, "uuid": "0892558c-2e5a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.177.108.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775126225, "uuid": "e492e55b-2e7f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.180.134.38", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775136425, "uuid": "a47cc003-2e97-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.145.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775098325, "uuid": "eec51351-2e3e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.105.178", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775168825, "uuid": "13e581a6-2ee3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.239.123", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775117524, "uuid": "a299497e-2e6b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.183.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775104925, "uuid": "4c932b59-2e4e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.207.173", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775138884, "uuid": "5e08cc61-2e9d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.18.70.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775122624, "uuid": "824a4e5a-2e77-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.97.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775137808, "uuid": "dc551c25-2e9a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.147.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775095085, "uuid": "6374a517-2e37-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.110.125.145", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775157006, "uuid": "8f6d9329-2ec7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.247.92.12", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775130906, "uuid": "caade265-2e8a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "87.121.84.78", "Tag": [ { "name": "87-121-84-78", "colour": "#565297", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140926, "uuid": "1edcbaab-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "app-trust-wallet.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140926, "uuid": "1ee7cf7b-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "audipoint.cz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140926, "uuid": "1eed16c2-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "e0-adobemodule-pdreaderl-w002-0llx00-uv0a0acr0bt-patch-dl0.pages.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775116625, "uuid": "8a412231-2e69-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fiker.cattermicoffa.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775127247, "uuid": "45648281-2e82-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "galaxis.fun" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140926, "uuid": "1f4cbbcd-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "jin.com.my" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140926, "uuid": "1efa9bc6-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "keilo-jermailer.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140931, "uuid": "21e99c31-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lejrmakei.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140926, "uuid": "1ef90cdf-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mailer-kjermjs.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140928, "uuid": "206da595-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mailer-kjermjs.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775092386, "uuid": "1acb1f71-2e31-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "microservisetrue.vip" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140926, "uuid": "1edf782b-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-ec081eb0fab74385a17d8d77afeeda3b.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140926, "uuid": "1ee3cb16-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "racing-shop-schuller.de" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775165290, "uuid": "d92898cf-2eda-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "securrty.cfd" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140926, "uuid": "1ed91585-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "themaintechnician.us" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775140928, "uuid": "20233fa2-2ea2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.az-partners.net" } ] } }