{ "Event": { "published": true, "date": "2026-02-16", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-02-16", "timestamp": 1771287320, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "8d16421b-ecdc-4fc1-b2f9-480ce2a48296", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84f78984-0acb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771200465, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771200465, "uuid": "edf66e41-5894-48f2-883c-e31d53fcc616", "comment": "Malware payload (Mirai)", "value": "d68bc580687d3c7cc5325c6c0e90ce31", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771200465, "uuid": "fcd0a206-905e-4b70-997f-f105cbc5ebfc", "comment": "Malware payload (Mirai)", "value": "6587694fa1b8452b450a2096ae5625bd39ea1415ccbfbe0e362a2e1bd5e3cc63", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771200465, "uuid": "49c79c00-3d81-40ed-8bce-96189939fa36", "value": "T139F34B17F4C184FDC499C1B44B9BF636DD72F19D1238B15B2BC4AA222E5DE205F2DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771200465, "uuid": "43f5a939-d267-4ff4-80a7-c3ff7f646349", "value": "3072:QwGSOajcIK3ICumZdbPEAAub+/L4zgVQ/m/ETsEV3OcB:QwXOajcIK3ICumIMWUQQzB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771200465, "uuid": "798acc96-901e-438a-bd9f-0dbabceb7717", "value": 157944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771200465, "uuid": "4953713d-083e-4937-ae91-5ec77259ea25", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1771200552, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771200552, "uuid": "6eb84224-a8a3-44b7-af92-c7c529c5fa5a", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771200552, "uuid": "e47c87c3-310e-4714-8a3b-d04312f8c2a4", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771200552, "uuid": "f2dc005e-ffd3-43ca-9c14-1b7bdbc7c28e", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771200552, "uuid": "86f0fe7e-545e-4982-ab33-9aec4c946ff7", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771200552, "uuid": "a23fd449-7f12-4b82-9a89-dd9b152410bb", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771201035, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771201035, "uuid": "66634f0f-0e35-4f32-9160-807846c682d6", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771201035, "uuid": "98ec9f8a-898e-4c3b-b03d-6d4158ef1dff", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771201035, "uuid": "f1585df1-c4ff-4322-997c-b5c2a80ab13b", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771201035, "uuid": "884de6b9-e922-43a6-8757-25c2ea53c337", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771201035, "uuid": "a8e735f9-b383-4777-a08d-a4dd8e73228d", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1771201637, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771201637, "uuid": "d202c925-730e-42a0-b3ec-f882fe7ca6d9", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771201637, "uuid": "54834580-86ec-442f-8229-c218fea643c8", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771201637, "uuid": "e1629d89-3b64-4482-9bf0-46a56eede59a", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771201637, "uuid": "e5a8a4ce-e691-436b-8043-4042b82a511e", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771201637, "uuid": "bef5f7c9-6352-4cdf-aad4-4585b4d2ed85", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8fa55dfd-0acf-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771202200, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771202200, "uuid": "9722c690-81a0-4e15-b659-12bb05c2bd8d", "comment": "Malware payload (Mirai)", "value": "39bdd059fc11b90c576310128dc1caa1", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771202200, "uuid": "f3b50227-609c-4a59-9aed-e4a964e5cd33", "comment": "Malware payload (Mirai)", "value": "07565cd9ee825a76a8010988293447d0b1649fe7f32f7b08073adb395efc5b7f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202200, "uuid": "dd6cfb8b-e171-43f6-b7c4-24ccc8a99906", "value": "T107D38D37D82A9F58C565C478B0609F742F53A99982471FBB69BBC2B04483E8CF506B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202200, "uuid": "ee693268-3bf3-45b9-8412-5f5852509504", "value": "1536:2mUk0pmvusx1fL40ZUqZ6ZfCnQGDKYa7ajbuaSJlMWDhBVPfHbzX:2mApeu2LhZUqZqf4QGmY9ua+MWFBVbT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771202200, "uuid": "fc4221d9-9a5a-4e5e-93cd-707e2e4ed2d4", "value": 134980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202200, "uuid": "1ec9820a-9ac3-408c-8c4d-a549c8647034", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac8cd981-0acf-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771202249, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771202249, "uuid": "987e03a5-caf9-47ae-9042-5d4a22690043", "comment": "Malware payload", "value": "bfcb8ecfb0b70926b6ca680769203b09", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771202249, "uuid": "e1abaa86-dcd9-4f37-b715-a99ed1b36ff3", "comment": "Malware payload", "value": "4b7a3fd788477ec5d0b2a54ec87212dae96bbd71f695006a66ac7ea0136fa964", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202249, "uuid": "d2de867d-c942-43aa-a91e-6254652312c8", "value": "T178A3E91916670890F1EEDDC00D89B8BA1A137773A5E11BF967CCD64CCD16EED28C36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202249, "uuid": "7f76f077-e476-4758-9d33-3f2151d8cdc8", "value": "1536:K4Xku131N6/RTVBMKJu83mPm+sezkTiBHAw06IyGbwgewyDjEYgIPLOAj1QJzqAB:jgVBH3mPm+sqk+HAw0F5KijXxB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771202249, "uuid": "ca786465-1e78-459a-897d-938be82373a2", "value": 98122, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202249, "uuid": "323e8b38-17da-4469-8cba-70281b2ddf18", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "943b4da8-06cb-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771202286, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771202286, "uuid": "337f726c-8491-4d46-ad82-8f4870c81219", "comment": "Malware payload", "value": "6972ea93ab927a279d98240a0de6be0f", "object_relation": "md5", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771202286, "uuid": "4e1adf87-ed40-42bc-bc48-5d91f20ae95d", "comment": "Malware payload", "value": "143a5b5c78fe71f2c0883a6a959937938b6288a15ac5cb031d35472b413a6c48", "object_relation": "sha256", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202286, "uuid": "6208af35-184d-4be4-9ff3-74caf9345b57", "value": "T1452523CC914A5C60ED2A8531FBC80FCA0D13534620BC9EED685596692BFFE64B501F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202286, "uuid": "7db606b0-826a-475e-b860-cd302fd125b1", "value": "24576:grEgV6dABDNOjAl6Gu7NYReSjQNEwUi2sgQ27kBrLkw1NUWF5:gIgV6dABUmi6jzbi2lhuQSL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771202286, "uuid": "18c35f94-f4d4-4b5b-9c67-3d57df30f386", "value": 1044108, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202286, "uuid": "745da325-f8d2-4310-9eb5-971b54217820", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d9afc085-0acf-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771202325, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771202325, "uuid": "b8cef47d-f94b-438a-98e7-1f0bd48697dc", "comment": "Malware payload (Mirai)", "value": "493f8bbba002db31c9f58f201331393c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771202325, "uuid": "890b41cf-953a-435c-bf81-1e4ce58c696a", "comment": "Malware payload (Mirai)", "value": "35e82fbbec99ea4b4ee90020a336b42dcd5a1cbdd564b50dc1ab4d31dc70bc76", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202325, "uuid": "86bff11a-c364-4313-aae8-e82fa9077b6a", "value": "T14E14C71AAB550FFBDCAFCD3702E90B0129CC644722A53B363674D528F55B64B49E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202325, "uuid": "40c34560-e9d3-46ed-9752-f29486b0beb9", "value": "3072:KB/JShL9gHhlKsS0Vludlt1EzqAv7u5C7RNXw+JIJSCn:KB/JShp0hlKSVludltDAviU7RdVIJS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771202325, "uuid": "2cb66903-9874-4605-805b-b5aa9ab2d3df", "value": 199144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202325, "uuid": "1a56e6a9-3f72-4bc4-ba8b-c8c818ae8372", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e144762b-0acf-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771202337, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771202337, "uuid": "97a3fba8-c374-423f-9074-d19976b5841d", "comment": "Malware payload", "value": "b52a32207dcbc942a0890c50d0062a6e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771202337, "uuid": "5294ac62-3ecd-4cbf-959a-aab71110fce8", "comment": "Malware payload", "value": "7099852d0736da8b58015e86ad12d094e55ebc575dbd9e936d93abde142d8585", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202337, "uuid": "d8d94240-0c36-4551-9f9f-31f64a1e3d04", "value": "T112E2E1DF4D2D2AB2CAAD00C508375165BC0C8A668C9AE17A728356E77E1254AA6FDB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202337, "uuid": "8b43e64d-39dc-41cd-b008-25abc83137c8", "value": "768:L8kKhcAvbgpyKXVcLJN648GLpE8jGU322LboTr:KyyKXYJI4tL32c0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771202337, "uuid": "14244bb6-a15d-4bbc-8bdc-def44aa5cff4", "value": 32388, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202337, "uuid": "8eede85f-3caa-466e-ba1f-b97b614daadd", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ace224e-0a78-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771202362, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771202362, "uuid": "4f8bdfe6-fba5-4d3b-a71d-6272141e2a7f", "comment": "Malware payload (Mirai)", "value": "ef99bd28c9a4991c2002273f318f06ed", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771202362, "uuid": "197c5f62-283f-4b09-afb5-049dd2efd5d4", "comment": "Malware payload (Mirai)", "value": "8e588b95c688f0cd54d687c684cf10c86fa6f65c8359a3e5355dc3cf77272897", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202362, "uuid": "a5499c5e-b925-4a6d-bda3-ef39bbde6934", "value": "T1F1933A85BD419622C2C116B7FF5F028D371697E8D2EA3202CD281FA4778B85B0E6B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202362, "uuid": "7a5660ea-cfa8-46d3-832e-2571d6cce6ae", "value": "1536:v/mbfzFJ9S1c9MzRnKXRdxjvE5iDelbzh8t4l8m5+8UmMWLrTkO+QG66AuvhnzW:v/mbfBJN92Rgzfabzh842m5+8UmMGlWw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771202362, "uuid": "76a9a476-c598-4527-bc88-92d480057970", "value": 91600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202362, "uuid": "08d18a49-d5ca-4671-9e20-ef065826609d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771202410, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771202410, "uuid": "c1838f39-3654-48ec-9299-aade0f8ee6b1", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771202410, "uuid": "6e6c43f3-e70d-49d1-ba3f-d7233359fd76", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202410, "uuid": "935de48f-37e3-4544-8363-79d1cf3c0ae7", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202410, "uuid": "4a0c158e-e18c-43d5-b64a-bf390bc251a5", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771202410, "uuid": "cc702f05-c398-465e-811b-398836636a92", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d7afbd7-0ad0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771202492, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771202492, "uuid": "44dfea3f-4ce5-48e2-8009-42f36946dbd3", "comment": "Malware payload", "value": "fb43020e7336484771c5107492400fea", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771202492, "uuid": "1b67862e-e77b-4052-b727-667b2a2db34f", "comment": "Malware payload", "value": "9065244a1bf3696c36d18c3ddd1d84130b8bbbaf51ff6a93d4e1b340ad0e193f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202492, "uuid": "42a583ed-55ed-44d0-adbd-3f6272828329", "value": "T10BA3137C5DA6F9BC09E4B44FD2E636943DB213EA01E1419638F532794C0299CAB8EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202492, "uuid": "25fd80fd-7d87-43bd-a06b-2f5a59f84851", "value": "3072:hErJ/ZjBclnQXrIGFHsBocZMaD5XlPcV+QTCWk:hqJpBcKX00wocvT7Mjk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771202492, "uuid": "0aa56b07-03e9-4c48-820d-6f6b13754e44", "value": 103190, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202492, "uuid": "e5c94242-0a5a-43af-8658-a53255a40df2", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6be43758-0ad0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771202570, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771202570, "uuid": "56a2dc83-8ad2-40c8-a8ea-bd84e7a9b284", "comment": "Malware payload (Mirai)", "value": "33d576baf02d44341961f7cb245a5619", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771202570, "uuid": "b18ff48d-cff9-40f7-b43d-a63d3c1781b4", "comment": "Malware payload (Mirai)", "value": "31e1e3ecb42e6984c3821a4fe8bb081564441e331e7a07421529374687fc9099", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202570, "uuid": "fc6470f3-4913-4008-92a1-1b1795089e8a", "value": "T1C6E30941FC414F27C6D612B7FB5E428D372A17E9D2DE71079D216F20378A85B0E7A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202570, "uuid": "7fd280f9-0f29-4eba-b5d8-0294be4e4c90", "value": "3072:5ay2AWA2Cm2RTSIG4GNwj+MyoEGIXoIV:5ay2Y2Cm2RGV4G+jfyoEXoIV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771202570, "uuid": "a096178d-5000-476b-bdbd-84e949429b7c", "value": 151104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202570, "uuid": "277573b6-0dc6-4149-a6cb-0c7bd833811e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d4afde40-0ad0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771202746, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771202746, "uuid": "408ec9ac-1418-49ff-8339-c3ab631350cb", "comment": "Malware payload", "value": "f6eb5312e7d670f088c22b697b0ce828", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771202746, "uuid": "24cb982c-a2a3-4191-be68-c780670ad417", "comment": "Malware payload", "value": "c37f2ce091ca9e402d155a4d10d66e8d45e24a849aa408d50b94901b4b21f0b5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202746, "uuid": "42854a07-02d3-4ff5-96ad-d2d6b68b7114", "value": "T14323F1184D1EB5E43AE8E1F8EF7D52332F5B86F591D9D01CA2353690F6282B5A0439", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202746, "uuid": "4fa37498-025a-4d8a-b0bc-7bcc9c5be1f6", "value": "768:uhlkzXPeS6iwvbHa8Z7mT7OIF6Qrs/zlmTfgVM8RV45Ql47Wz5yVtql4SONxXu07:uhlkzfeS6xbHa8Z7mTSIIzblAse57Wzm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771202746, "uuid": "ec4c2cc9-d8e7-472a-960e-63d8235f4491", "value": 45973, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202746, "uuid": "b7c5bb00-98c5-495f-9656-8225f8ef0264", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25134b8b-0ad1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771202881, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771202881, "uuid": "606af428-c8a1-4c38-919d-9b89b396798e", "comment": "Malware payload (Mirai)", "value": "5e3c74a223fd1f9e52dac442cc75182f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771202881, "uuid": "5b2e7915-8466-45e9-9b54-366d3c357432", "comment": "Malware payload (Mirai)", "value": "97f134418c15bd7a5aaae97eab27a1984c6489bfb4e2195b9d686a23a3a8acc9", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202881, "uuid": "2c5f277a-8c3f-4f91-9913-a4491c04f213", "value": "T1ABE33A06B31C0A07D2632EF03A3F67E183EFA6D121E4F641655F9B8A95B1D360586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202881, "uuid": "f6fa726b-b76c-4ba9-b1b6-014f1559f34b", "value": "1536:7ipG2TGJm3nC6R2QJ0HrVq+GAxsPEWlbD9o9WwUUt4/RYjSdKvALlsJvdxZWaqjm:7sfTTf/+GAxsNkL4p8S55LJCO6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771202881, "uuid": "66c904e5-4b21-4a55-90ba-95c8e7632dc3", "value": 151324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202881, "uuid": "9487ceeb-266d-4c68-8128-433d7a8c3840", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "32dd2ef5-0ad1-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771202904, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771202904, "uuid": "f0e79450-4275-4338-b070-0fe2183b18f2", "comment": "Malware payload", "value": "b0be5c4e33c1da502c67287de619e0b2", "object_relation": "md5", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "password: 2026", "colour": "#a65f14", "exportable": true, "hide_tag": false }, { "name": "pw-2026", "colour": "#4d3d79", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771202904, "uuid": "a4e8e745-02c4-487e-8119-36f14448531e", "comment": "Malware payload", "value": "9fee189a3f4fef1c53df17090d6f9742d94a7e72aa9b05cddfe8996c7924f11e", "object_relation": "sha256", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "password: 2026", "colour": "#a65f14", "exportable": true, "hide_tag": false }, { "name": "pw-2026", "colour": "#4d3d79", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202904, "uuid": "6f66e710-3770-4bab-8db7-59ac5f7b226c", "value": "T1E13633186BFC899FDC708A32715E2BBDA08FD2F225616F42A384871D7E1055F185A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202904, "uuid": "7658d86d-a892-4deb-87ec-817cab3e45b7", "value": "98304:2wkY7wGLdpijQItPXyQbPtSQjy9h35GAe6TGLEcp4Em0tIoHoPnZG:247FiEIFyQpsN5KrYcVztIlE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771202904, "uuid": "87768f3a-a505-4f7c-859f-afa22c3a09b6", "value": 5271916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202904, "uuid": "82f63b13-4e99-49c2-acf7-0a7d69f056ec", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52aa012d-0ad1-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771202957, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771202957, "uuid": "369d7c1a-ba7d-4d37-a74a-420d0cb88bfb", "comment": "Malware payload", "value": "4f6481c3fafd9b7b37e1752e4d4016f0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771202957, "uuid": "bdd6d708-4e37-46dc-9353-af177150a996", "comment": "Malware payload", "value": "fa965b7fc6d7aadd6339ca7b01b0abb122a8f509e081e917a75b2c4414ad0c99", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202957, "uuid": "425cd9bb-4a33-4128-8639-9a62a084ae59", "value": "T1D72302138FB3E269F726F7FBC82D548791D4255D1A52E718609F10772A36970E03BD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202957, "uuid": "3aba17b4-8d5e-4d2f-b7cb-74d65f52ddb6", "value": "768:M0lpp01lEurKOcV8s4hcUfM46bZXK8xvQ43iBpGE1agcvx87a3:pTpEqiKZilh5Arx4N/Lrc+7A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771202957, "uuid": "51d6c9a6-e296-47ed-99b3-22d2139ef4d3", "value": 45671, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202957, "uuid": "114fa70c-1c1d-4642-9088-ecbf849e6da0", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "778be46a-0ad1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771203019, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203019, "uuid": "0b9e5786-1550-45f6-b4d5-8aab2bd702d5", "comment": "Malware payload (Mirai)", "value": "679970ca388b4a92eac9d1aee30edff2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203019, "uuid": "1abf04b7-1047-4e34-a195-bc8a32244a03", "comment": "Malware payload (Mirai)", "value": "b6026c3300e34bfa560ed8fdd6e638cf81c4bf629b3201da31c2135c8ad6f819", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203019, "uuid": "74aa12a5-3a68-4b9b-812d-c58abfc1b6ce", "value": "T14483D60ABF711EBBD4AFDD3346A60749389D590621B93F393674D81CF60A68B05E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203019, "uuid": "4986072a-9271-48d8-9437-54928b960bb1", "value": "1536:YacQ8XmuuEgG35/qmob0Z3w36n0UpqBYCxZbxc81usHFOLsZdIvZfqFX39wu7r8b:YRZk0Z6LIkgTds", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771203019, "uuid": "0dad9f11-3428-4fb1-9792-420f8d5bdbc0", "value": 88372, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203019, "uuid": "0ea32a9d-5bdf-4ce2-9f0b-094f70395035", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81344c0d-0ad1-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771203035, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203035, "uuid": "d456cfa9-2e91-4be7-8f36-c84087470f7d", "comment": "Malware payload", "value": "8b2051f5e2d428947bdee1e903029343", "object_relation": "md5", "Tag": [ { "name": "msi-stego", "colour": "#9a67cc", "exportable": true, "hide_tag": false }, { "name": "stego", "colour": "#38259d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203035, "uuid": "75212eb6-d6ef-49b2-b6a8-dad64f0cdf89", "comment": "Malware payload", "value": "656991f4dabe0e5d989be730dac86a2cf294b6b538b08d7db7a0a72f0c6c484b", "object_relation": "sha256", "Tag": [ { "name": "msi-stego", "colour": "#9a67cc", "exportable": true, "hide_tag": false }, { "name": "stego", "colour": "#38259d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203035, "uuid": "bee61c29-8620-45aa-824a-dc5e3c85d685", "value": "T195D58C36A2A2FDD5432A2DE8C1843D120C9C4AD7577142ECFEC94ACFA06E154DBBD9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203035, "uuid": "f126e634-5019-4531-a21e-8b230abfa2a2", "value": "24576:8+EhkjixLXR+bG/f29mFusqa+n0tkR5JoZh73VVPYDlJ0K3x0cGPM0wgHGnv3UcN:8UixbItdTrJoFVPMvXGNzkx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771203035, "uuid": "dde79f2a-5e33-4bb2-813a-67bdd0fd1060", "value": 2900144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203035, "uuid": "d11c1d67-61a3-49ae-9001-65359ff56000", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6766942-0ad1-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771203205, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203205, "uuid": "1c8f4fe6-0cb9-4d47-9958-f2b677fd7cdc", "comment": "Malware payload", "value": "d4b9892f9dd6635b6311a9898edafd97", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203205, "uuid": "2c2e2725-8b35-4418-a810-9f700501ae0f", "comment": "Malware payload", "value": "217cc2cf71538b0bfd3ecfd3a1ff8687b7ccde5b3f8e8e66548d23e966d5d716", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203205, "uuid": "5da9bfa4-3dbb-4240-923c-94a68f296cec", "value": "T1FE3301CA2D4ACC5F01A84054043721AEEE6AE3DB8BE974B5D2F4D67D04039E7D46CF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203205, "uuid": "17c92289-570b-40aa-8cdd-46f98b370ef6", "value": "1536:DNF9x/XwMwT+Kn3Ka5d9FBvXOiHKBn8sXJm7KZ:DPvJL+d9FhOKo82X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771203205, "uuid": "b1415cf8-1b62-46c8-89a4-2a179ba20a91", "value": 51677, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203205, "uuid": "df948343-3c28-4b2b-b03b-32676dad6d7c", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "189a247c-0ad2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771203289, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203289, "uuid": "e752bed4-87cb-4eec-b713-dfb37b2b5987", "comment": "Malware payload (Mirai)", "value": "5b53382600030a071354e1a4e606dc02", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203289, "uuid": "22d2ffec-ab1a-4e6a-943f-56f2f5abed45", "comment": "Malware payload (Mirai)", "value": "2e14f069482a0eb3fcbdb24688ccc0f202096a6db0cde49dfccceb969b3bfd8a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203289, "uuid": "3e305f83-770a-48fa-9efa-b5c706a544bf", "value": "T15CF31A56F8818B11C5C112BAFA1D128E37131BBCE2DF72129D246F647BCA96F0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203289, "uuid": "14ba6e0d-3283-4e35-b4f7-299df7bd0002", "value": "1536:ENnLFLaOF3Jh6TZ5+ldg6tje85vmG4bqeXymtxCb4Tryaf96Kf9X2vi7uyH8w5/a:wLaOY/u8GSPXJY4TuafRnuyHLBb3EkW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771203289, "uuid": "b6d2372b-2a61-47af-86e1-1b4518f0203f", "value": 162972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203289, "uuid": "118c63f4-5613-44c3-ac96-0119684c8073", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c66154dc-0ab9-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771203300, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203300, "uuid": "02e8ca06-9ab3-4c88-a07d-cbd52fba4628", "comment": "Malware payload (Mirai)", "value": "9bcccb37d4236388bef3b7ec4117fa6e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203300, "uuid": "4869ff37-1e1d-42b9-a763-be1debe20d9d", "comment": "Malware payload (Mirai)", "value": "1bd633ac85bc3afcc57d0e0d850af03dd3d0a37632d8cf0d1a106bca9a88e5a8", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203300, "uuid": "c3820298-4fdb-4dc9-b02e-5a5a55f629b7", "value": "T121A36CC1F643C5F5D8471571203BFB339B32E1BE2119EA43E7689D33AC516029A1AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203300, "uuid": "4ccafaed-7940-4655-b319-60aa5e760f72", "value": "1536:r9sJShjCt/+h36PBXITHtFE5p384lMe7dnHywKqsW1qElfSSbkIb:JHfh36PBXITHtFEbHjd/Kk1Xagb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771203300, "uuid": "eefcf12f-8138-4d9c-8f77-270bcf0dc0f8", "value": 103624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203300, "uuid": "a380f345-d9e1-49ec-9d9d-208b78ec0b6c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b064e11f-0ad2-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771203544, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203544, "uuid": "fac3d9f0-9501-4943-b0b1-c364391595fd", "comment": "Malware payload", "value": "eec672a93869632e5958449feed6dd89", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203544, "uuid": "23fec222-5e5a-4c66-908c-3f9442ee47ea", "comment": "Malware payload", "value": "2ea9e8110bcc6ab0a8a7f4278295b05b6f27699cd4dff2bbe152c625fe4f2221", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203544, "uuid": "475cd5ae-e391-457f-8ec2-8cd49e509ba5", "value": "T124B32A6BA7F230747117CB19F5D6B728A6ADC163EB020EE3BDB5652D87C228502736", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203544, "uuid": "6b9761de-c1c4-4c9c-85eb-4ffe266355ed", "value": "768:jG5Zdyp3trc7lGRNjcXscJGcz74k/tHcm1bSj32vcFP0mbeGYd:j8ypdr4l4k/1bSj32vcFP/qGYd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771203544, "uuid": "b820a85a-423b-4cd4-8f31-eb1e1f8bfed8", "value": 115448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203544, "uuid": "9067e8a9-72d9-4e88-9cc4-d4008f8e4b54", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb81c2a0-0ad2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771203643, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203643, "uuid": "531984c5-aaa2-4e22-8bbb-24cc516e0e6c", "comment": "Malware payload (Mirai)", "value": "a4a4cfe3b443897b8fd646702fc681fb", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203643, "uuid": "945a8769-3e85-43e8-bdb2-7c2c1afb3a08", "comment": "Malware payload (Mirai)", "value": "41f5fd6eb26c10357a713f580d8eaf1e9cc0a2f0408e011374711a735860e146", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203643, "uuid": "f2474123-5013-43a6-b25f-0c0134ae9064", "value": "T1E2F35B52F7414A13C0D6177AB6AF424533239BA5D3DB330699286BF43F8679F0E63A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203643, "uuid": "54d1fcef-f031-434a-97b9-daa482f66882", "value": "3072:2jPR9Gh/ZVnajBslTuROlwFcQUke7BaVPM/9Bc:WZ9GlfnajBslTuolsUke7BCPM/9Bc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771203643, "uuid": "a2022bc6-595f-46e4-8bd2-6b2e92ed26eb", "value": 165342, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203643, "uuid": "0658448a-2708-438f-ac65-2c39275ba481", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24a2e2b4-0ad3-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771203739, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203739, "uuid": "7cc00580-292c-4f05-9a11-cc1e9697604a", "comment": "Malware payload (Mirai)", "value": "7d04c54aee782e3b11337490751cc6ae", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203739, "uuid": "50313ebe-fcc8-48a7-b9d6-ca011cd80834", "comment": "Malware payload (Mirai)", "value": "d46449bd4cbbc58ce3caf8d597767e2019b0cc00429116ccd5edb3c13f93649a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203739, "uuid": "ef36da76-1585-42fe-95a8-2c9e91207e7d", "value": "T10743F124FA511AD3CCEA8C7481DE36711F1DA12936DF8BAC671B0985B31911F75A83", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203739, "uuid": "a063831a-d4c1-49d6-968c-57a258f11c42", "value": "1536:hHrRD0gn1aEVi15uooQJpP8LIYUK5xUStjy:JdUEiOdWF8KK3A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771203739, "uuid": "da5b2d42-0abb-4434-be21-56eba3316ea3", "value": 59984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203739, "uuid": "3ef66844-3c26-4874-94c7-27aaf5c37916", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24a93033-0ad3-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771203739, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203739, "uuid": "7227c381-3336-4f92-919e-fe0e78ec0563", "comment": "Malware payload (Mirai)", "value": "1cdfb723be0af40f72731d358b18a208", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203739, "uuid": "5cddd1a1-ffbe-4d59-8d4f-85716666eeff", "comment": "Malware payload (Mirai)", "value": "8682059af4f2ef10eae2630a99d31c0bac071d2c93752de0484fdbfef49e8da5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203739, "uuid": "96c3ab3f-b650-46ce-bb34-2c92b7869563", "value": "T147043BC7F901D9BEF80BE77648170915B630B7E210924B337257796BEC3A0991927E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203739, "uuid": "0dedf495-4ca7-4ab1-8071-a5b52eb4fe17", "value": "3072:BptxkKrqSc9UcMmm+PD64K39U2VXgVijbi0LoaAS8yY0p1uh/FEKf:3txkKrqScm+PDFKNtVXPLayYYJKf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771203739, "uuid": "63e96bef-ca42-4e5e-87fe-f09bbb9f4a5d", "value": 175744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203739, "uuid": "e405aa2c-ef0d-4ea0-b8c6-0d094cb2a0a8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24e8dda1-0ad3-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771203739, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203739, "uuid": "be5af293-5950-45ff-919d-f397740d4dde", "comment": "Malware payload (Mirai)", "value": "d7e1e64549a3ee9f39790758ee203a5e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203739, "uuid": "4d44c6fc-b60d-4d5d-8807-7c1638bf35be", "comment": "Malware payload (Mirai)", "value": "b25664a4fb9df5e6f84850cc9209a2ae29139a767f3b160d3314564ed3077f4b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203739, "uuid": "d8a91593-716a-4508-9d06-90c7804b39a1", "value": "T101A2D0A6D3D3D671D6908935EB7C84A26ED0CBBDF7F73063102142D622C5A865AFA1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203739, "uuid": "0c7d6d2f-aca5-4690-b5db-bb38eb6fde58", "value": "384:MOTec4Qq28dNSrGxwmI+mCsOWbckgtUdyismYi2jvw+2hymdGUop5hX4:MOizQq28CrGxKCP/ky68p2s3UozJ4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771203739, "uuid": "7627a4b5-6a23-4e79-8617-3f4e928cd641", "value": 22244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203739, "uuid": "34e2ba05-723a-41c9-bca3-fedce70e8099", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25311101-0ad3-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771203740, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203740, "uuid": "fe3068fb-998f-418c-91f0-5c39b9456b86", "comment": "Malware payload (Mirai)", "value": "e4b7ea2a724857c2a4de554260dbb75f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203740, "uuid": "ba0bd31c-1d21-4b60-a52f-bcc76dba5784", "comment": "Malware payload (Mirai)", "value": "65a3c5fdea735eaac0bdcd8550d5a4d8e9c9b044280918fe29a32ebb92f36b7b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203740, "uuid": "7b9f1f83-4595-40ed-8263-683981e1febc", "value": "T1E243F11A3357AAB2C7C0483BC66485132F5E3EB6D545250B45D06BECB6AFE48C9F1A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203740, "uuid": "12d094db-ecb8-49bc-b08e-093aa2dfad4c", "value": "1536:6oZVdjMI2ANMTdsJb9e8Q4Y87ejMUe+Q93Ls:6oZbb5MTdKxe8Q47ejhQJLs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771203740, "uuid": "2e821a41-2db0-4f59-8ac8-e75b739fc8be", "value": 59012, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203740, "uuid": "a009c877-64f7-463a-9687-188a26ea2862", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2551eba4-0ad3-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771203740, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203740, "uuid": "385e93db-be2d-4fa3-a949-cb2b53d39631", "comment": "Malware payload (Mirai)", "value": "8cb82fd76abbe1d02e37d860c09bd534", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203740, "uuid": "95d1e623-d6b2-4e03-823d-42711270ef9a", "comment": "Malware payload (Mirai)", "value": "4035f4d01f1331648b75c2f2a9e1e46f80eb8864b80ede6e49bc98d2892139df", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203740, "uuid": "70939915-9be7-445e-9291-8b8c658ce2b2", "value": "T18833F190459AB340E2301D3EB9BD8C1B2DD5A7BCDAB4F0B215D48B811E07D5D58B9F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203740, "uuid": "3f4154f8-ed77-4c61-86e7-c8a035546a34", "value": "768:B44O4eyC217SuUTXZazr6s7PvQAdpakxue6+t0NGX06/OnhqolRRN1iZ20njShIg:BbdAsKU64hp1uGKsKR4M0IBg2Axz+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771203740, "uuid": "93883933-b228-46d0-b563-27ab6ee2b9e2", "value": 53776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203740, "uuid": "f379e3d8-8115-4207-8409-602322d6b3dc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "255a82ca-0ad3-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771203740, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203740, "uuid": "461bf2dd-a482-4efd-9dad-6c474f7a8eaa", "comment": "Malware payload (Mirai)", "value": "32fcb1fe8797b87f5d4cfdd5de442a1e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203740, "uuid": "16f3b835-08c6-4b82-9893-35c4fec7576f", "comment": "Malware payload (Mirai)", "value": "10d2a4874f03799928bf2bd4fc9e2d1dc31f352d6048fea3f093804b91db476c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203740, "uuid": "4bff7a67-81ec-4dba-8480-e9045c55e1d8", "value": "T11E430168A71102B2E80519300F7B479C231E1FBE9647B962A11BEB6B5D061FADD13D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203740, "uuid": "56f1bf17-3606-4ca6-a41c-f401b196f112", "value": "1536:u4kKad2CGj1NUqIpaBotfHathOWSQEb4VJur:byqxt5B77C4VQr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771203740, "uuid": "10ef49cb-6a40-412f-a665-14b80a892a82", "value": 58232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203740, "uuid": "de5bb1d1-8302-4cd9-9f9e-975d13c1275a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25621ab6-0ad3-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771203740, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203740, "uuid": "357dc600-d783-4fef-8310-653d97b936ce", "comment": "Malware payload (Mirai)", "value": "cfbac355b2b707ca94d153a1ed030b59", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203740, "uuid": "bf9832dc-bbac-433c-ac66-f194e8fde2a5", "comment": "Malware payload (Mirai)", "value": "b0536dc36f7b910ad30d51c15fe4f6b9c7a1e1a5536065a06bb2765aefb570ed", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203740, "uuid": "e091ebb0-7a30-49b3-9571-a0a96d55267b", "value": "T1D633F2B5961295C4FBB3F6624C8FEFB8B72115D1F35BC7814106AB40256B4B53218F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203740, "uuid": "95535828-d513-4e50-b14d-9942bc77f8e7", "value": "1536:CVaoF8CDX+KpdO7URfCYerKAa5UKFu/AjINn2I0jG4u+qgw09V:UaovZsIRfoPaaKYaY21G4u+qgwg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771203740, "uuid": "f4b2c2c3-c638-48fa-bc5c-5717386d83de", "value": 53116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203740, "uuid": "29fee073-c395-460d-a5b4-5666eb8464c7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25632e04-0ad3-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771203740, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203740, "uuid": "5218fe3a-9c25-499b-a132-40a12d0b76fa", "comment": "Malware payload (Mirai)", "value": "5f0d68e28c7bb5c81de31f9e3f289c36", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203740, "uuid": "c0cdb49e-bf4b-4e1e-856d-0ef6fa16a8de", "comment": "Malware payload (Mirai)", "value": "fd75e92ff576c86f245ca9c6f0fbde700b56f8750bbfb4c116a95cd91c06b344", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203740, "uuid": "418f067c-2192-4681-bd8d-a3db06c71241", "value": "T12C7301492489D610FF110776CC5828CD8841A8D5D0EDB1EB32265E39D9CFCA22DBED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203740, "uuid": "346a5be6-174b-405a-b9b3-cfb7d02035b8", "value": "1536:L8IHq+kgs7VI83wgrzlEFSPO/hcoiisjuq5Z14lSLtBcGXUqh9+sadEO3dzzUCRG:wIHq+kOQwgrBEEO/h7iF6q5v44L05DRK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771203740, "uuid": "3509f562-d073-4778-9aea-516e5c4a0c80", "value": 77208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203740, "uuid": "a1781d4a-5394-4509-8ef0-e8cf5913b06a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2569b792-0ad3-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771203740, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203740, "uuid": "97cfd75e-89ae-4530-a77a-8ceb5c862c85", "comment": "Malware payload (Mirai)", "value": "44b632dc222ed511675691962a78c8c3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203740, "uuid": "3f49e56d-bb1d-43b5-b24a-5577437d164f", "comment": "Malware payload (Mirai)", "value": "167ca7a16cdd7b01d8152649b181e4e450b88b7db25e5cb09d66822fedc4c5af", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203740, "uuid": "63294c86-3596-4619-ba2e-0163856cd7c0", "value": "T190D37B73D8256E98C625C5B4B0648F782F43D1A881436FBE69B7C2B05487D8DF609B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203740, "uuid": "a4735ba9-c5fb-4e5c-b122-b9c11d210908", "value": "3072:QOuckx3SPfcjjNr/qDhTdDWIZ19K6hh1Lkb6:QOucl0jNri9dSIP9dkb6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771203740, "uuid": "d8c9dd95-f210-4016-81a2-96ba76778d96", "value": 141920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203740, "uuid": "2e0a147c-c9cb-4468-a45f-0a8ac27ce0d5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44690dff-0ad3-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771203792, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203792, "uuid": "c55e4587-58ca-4478-9eea-15e48ef8f36d", "comment": "Malware payload (Mirai)", "value": "1fcc5b8b10818edaf6ff3d3d8a431b5d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203792, "uuid": "b8555c75-1847-4c71-afa4-7fd0bb10488c", "comment": "Malware payload (Mirai)", "value": "9ae991d3ace1c0b0ece56a67a2d73ab33abfdc3ef8108551f6ab391dee9dab3b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203792, "uuid": "9afebe1f-eb42-4075-8108-eecf3815d47f", "value": "T1F723F22AC6E6002CF99D1036A479DFCB0DB0EB1F62A0C7A13DD5546EA2C6B2975507", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203792, "uuid": "b39de758-d81d-4b08-8b8c-77f6e88cb6ab", "value": "768:EessG0aMqhILLSH/GymQfMhpcqNzgmPtY3wXz0tW4wjwnbcuyD7UoQRjN:EessLfL4QxhpcpmFCwDchnouy8oyJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771203792, "uuid": "331c8e9b-c8a0-4d75-9e9d-cd1b2fd451a7", "value": 46724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203792, "uuid": "8ef6ae08-0da7-45b0-8c16-0f558c91f9fd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24e23b21-0ab7-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771203867, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203867, "uuid": "02c9bdc0-5060-4510-a960-53b44572ae42", "comment": "Malware payload (Mirai)", "value": "a3a6b2810fa525c6b764f361207ebf5a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203867, "uuid": "41681e61-4113-43f3-8396-b8636487e651", "comment": "Malware payload (Mirai)", "value": "41c085314a6f78cb8222442e1e13bc0796fd3c8fbde1686d877bf1297bd5be87", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203867, "uuid": "225d4d5a-7460-4004-9e42-c8c515250e1f", "value": "T18AE30945FC404E27C6D612BBFB5E428D3B2A17E9D2EE71039D215F21378685B0E7BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203867, "uuid": "22c18120-21fc-4144-978f-5e1f06a54ae1", "value": "1536:pFc6Lk9dqXabb6TXzOjtbp1MJp3uQLYUasllJLzg2HAXv/4VEr8TKj4Slwz6kzIj:pFZLrPpHYUdFzgb4e8Y4SezYAAbc+hV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771203867, "uuid": "56c0a99e-8896-4d55-86af-d01e17e8b0fc", "value": 148064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203867, "uuid": "1c1a1daa-47d4-4ffc-858a-263ee0325025", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "328c848d-0ad4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771204192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771204192, "uuid": "ffd3206e-aa6e-42be-97b6-3f1a9f88f524", "comment": "Malware payload (Mirai)", "value": "2c5cc9e36830a652ae24a705bbe124b4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771204192, "uuid": "c4eae9f6-3c70-438f-bb6b-3d22faa5f72d", "comment": "Malware payload (Mirai)", "value": "a82b9ca1c83124567d31ffabfdf96404fa8142be682fd719d01683c0827a37c2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771204192, "uuid": "58064ee4-fa91-43f4-96ce-cf751fe0cf1f", "value": "T1A783854AAD539FBCF36C83344FB38F3A6655239533A0C685E25CD9506D6024E286FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771204192, "uuid": "2e3177fb-c889-42d7-ad88-3a136809df25", "value": "1536:/qvnEt3nj6DDtDDdBDC5a1u053PNxyqncXpOn8Q:y/OnTa1u0533xcU8Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771204192, "uuid": "3c0c9060-653a-40dc-9d7d-1bde1613eac8", "value": 85088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771204192, "uuid": "30350eaf-cd99-4736-8dd6-82da23597fc4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c1cede2-0ad4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771204261, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771204261, "uuid": "364dd443-7609-4682-a46f-b6e5d715f07d", "comment": "Malware payload (Mirai)", "value": "9086493f24e53b9b1b82fb48032cf611", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771204261, "uuid": "7edac485-7a5c-4fd9-b454-eb35a14e5779", "comment": "Malware payload (Mirai)", "value": "9d9dd3db55dffd64a09c182a49406dff9e00cabcb416c7c41407934aedc2c5d1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771204261, "uuid": "4e7d31b6-83cd-4d7e-9116-84b5d56ce877", "value": "T1C0F34BC7F800CEBDF80AE7374857090AB130B7E211925B376257797BEC7A1990867E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771204261, "uuid": "5c0a8591-68bf-4176-b760-d2334309e9d6", "value": "3072:JNRByevhWDaC/4AyxeUvH6N4p16XVVvjbiTLQoGJyq+5lI:JHweJfDxeUvaN86XgLQDyq2lI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771204261, "uuid": "061662e7-7b10-4157-932e-74d528636132", "value": 167936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771204261, "uuid": "8ae37c67-f3a4-430f-8db4-b721509faeba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8164badb-0ad5-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771204754, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771204754, "uuid": "935b046d-f9fc-4ddd-9925-1c977f8386cc", "comment": "Malware payload", "value": "ff52b9610856d516fc0059719cadbbbb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771204754, "uuid": "1757d0a6-b1fb-43ff-a123-403647cfc312", "comment": "Malware payload", "value": "4d564d3d3889cae1e0901346c06f8299e3f072b2ae7d3d8e86ea9033f5928976", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771204754, "uuid": "735227e9-9022-4627-abbf-b647444442a8", "value": "T18713F1FA5AB813F4888DA069CD83BD05645EA4DB3833F0DC4151AA8E17596E4F6C7C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771204754, "uuid": "92096de4-401d-42d7-9da8-37e2724fb792", "value": "768:s/34rVaMu7kL4ht1Qs3byJJegCGyh5SUYPQ2k0rBTES0EFNP3Qj0TXG6+ZJNi+b:s/34alkkh0s3AJBch5lYPQ2k0r2SnN5G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771204754, "uuid": "b725fe5d-6f62-40ef-8de6-24d883a41118", "value": 42174, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771204754, "uuid": "eb69b5fb-7148-493a-ac82-a1b43c7e89c0", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89ea9403-0ad5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771204768, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771204768, "uuid": "81d669bd-f7a6-4fa9-b29b-81cfbe0fbc8e", "comment": "Malware payload (Mirai)", "value": "c9af9234c0e0ddf6a9509a0412380aab", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771204768, "uuid": "141ecfe7-2cae-4711-a529-46cda33dbdf6", "comment": "Malware payload (Mirai)", "value": "9af93e64331a89f1a3ba55a1d3635a0403121c87350c48647668e9196cf23c93", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771204768, "uuid": "994e47c8-c8bb-45fb-bca0-fa62363cf305", "value": "T11A14B81A6F228F7DF668873047B74E25AB5C23D627E1D641E1ACC2105E6039E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771204768, "uuid": "a209c146-447f-4c6a-aa51-74f95f1d00d5", "value": "3072:Q4DjchqpXc9fx03C1JzFA5QEw0ei9mQ+00:Qujchqp5UeQEiisQ+00", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771204768, "uuid": "885e7459-8668-42d9-a199-776b070ad851", "value": 198312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771204768, "uuid": "a8207e2c-fc16-4ae2-80bb-e18466db0451", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "673d602a-0ad6-11f1-8369-82aee05be84a", "comment": "Malware payload (NirCmd)", "timestamp": 1771205139, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771205139, "uuid": "452d96bc-d079-43eb-8e4c-cccb6a832b64", "comment": "Malware payload (NirCmd)", "value": "ee3533a82e2c3ed9da31c231210c0ae7", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "NirCmd", "colour": "#9081ea", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771205139, "uuid": "17134682-529e-4780-8911-c863c65befea", "comment": "Malware payload (NirCmd)", "value": "ca794c3f195c82821b6f589922078fa5f7d1cf414f92e4888d4c059625a9c2a9", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "NirCmd", "colour": "#9081ea", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771205139, "uuid": "4025e367-b992-4ba8-91b8-dca11d46fb90", "value": "T143A52342F8C485F3C4511C331B65A7616A7DBE202F268EDBB3856B1DE9614D0EB31A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771205139, "uuid": "5302e180-75a4-4de0-ba26-08923ffa99eb", "value": "12e12319f1029ec4f8fcbed7e82df162", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771205139, "uuid": "e1a474c7-cb96-4469-9007-499290320fdd", "value": "49152:ABRWTpc8iYM5pF9UBB6jdLXsuuX4/cqZIiQx6lSONx:aETFM5pXUBB6BLXTuoEXx6lSONx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771205139, "uuid": "c2244801-4fd5-49bf-892c-5c0d673218fc", "value": 2110512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771205139, "uuid": "a359e7b7-e3a9-4a4c-b2da-1a52ede85328", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb4e3da3-0ad6-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771205307, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771205307, "uuid": "828cd5cd-8480-45b0-8456-eae565333dc9", "comment": "Malware payload", "value": "392afead261f94dc11cad823c42e28f8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771205307, "uuid": "ba648185-a9e4-4336-9368-befeed891916", "comment": "Malware payload", "value": "5aa944233c4d30b71e9de2dc87e1f7b8b483066b64cd04928fe5070f9175eaf1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771205307, "uuid": "6a51b378-311a-4298-a755-ef017adf5103", "value": "T1838308327588582A210B028FD263336C70FFD8E2D611E5B6F6F922344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771205307, "uuid": "9cd4a436-f0ac-4422-80b5-4bf42bb88b00", "value": "1536:XJyp/QdMqpYJKNoCtpxD3t2ZSDXpdyr2pbn4WatVN/:XEKltp9t2SX/yr2pb4WQVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771205307, "uuid": "c406b673-ddde-4bd7-a374-84d095615c78", "value": 85051, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771205307, "uuid": "da7fa499-ccb8-4871-b7a5-1c2ea3cce867", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d953ac0-0ad7-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771205526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771205526, "uuid": "269f462b-e2d9-44b7-8381-a85f76fb2746", "comment": "Malware payload (Mirai)", "value": "3ed9f24d519c0667e929fc69f25a45a0", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771205526, "uuid": "780c0ccc-7960-4b06-b83c-867409c3f08a", "comment": "Malware payload (Mirai)", "value": "79ad0259ed7ac75bb1e0d804f7360f7d964a3abf03c6c15afa3a3d308af1c9d8", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771205526, "uuid": "210a8f52-30f4-40e4-90b8-455d41211c7f", "value": "T18E63088ABCC5C202C5F061B2BB1F55CE375643B8E3E2B157CD19AB29674F8670A372", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771205526, "uuid": "f3af25bc-446e-4535-bbb9-f91a2100bf24", "value": "768:AcdiUs1WRhdhoUosVbqZT9x3cIWVCw1baM8NseKvEunHinByrSkYtMyWh05ddswM:XP5uferHz58psySpZg24rAUNOBqVqr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771205526, "uuid": "56186a9d-790f-44e6-a924-03b97f54ab97", "value": 70724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771205526, "uuid": "b2cd9550-047d-4e03-933b-1c2fe1e14090", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9343afc1-0ad7-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771205643, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771205643, "uuid": "e445eef1-0d3c-43e1-9f0a-7679a1c3bf32", "comment": "Malware payload (Mirai)", "value": "e28d18ccca8da4b23b0d8e66e51e6628", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771205643, "uuid": "ed1add81-aba5-4688-bc20-8aede1b75605", "comment": "Malware payload (Mirai)", "value": "1d6629a1fbed54ee4b610deff88df05182a43821b55587ce4ca05355934b286f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771205643, "uuid": "8a0cefc9-4563-4212-ba19-5af29513e8b4", "value": "T137C31ACABC418F11D5D665BAFE0E518D33134B78E3FA7103CE149B2A678A86B0B3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771205643, "uuid": "cb564030-c711-4d3d-ba32-3eb3db476986", "value": "3072:5E776azZ8kRzsEDqf7P+qzMnBxEnk/MFrxqMU5IGVm4gSMD5Dn4:cy+/6P+qzMnvEn9FVqMU57V7gZD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771205643, "uuid": "90cb341e-7f8e-4067-940e-0a24bc3a1470", "value": 120356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771205643, "uuid": "65ee0d44-8c85-480f-af07-ceffb2d2c763", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f7cabdb-0ad8-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771206039, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771206039, "uuid": "805a0c86-1858-44c9-9949-958ab035bbe1", "comment": "Malware payload", "value": "286942d98af5ce2831534adcaa7915e9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771206039, "uuid": "0928e2ed-13ee-4e28-ae51-17bc643ce2cd", "comment": "Malware payload", "value": "e5911a8226b91038c1ab03eca7a43035fbcbea3447c79e71bdf368ac099e7beb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771206039, "uuid": "735d910d-1486-4ba7-b135-5ae8e71b0137", "value": "T12823F1C08FEF01931374B553760869D7A96AB768B78F2B6FA041643613F91B484AB5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771206039, "uuid": "aee40720-2b33-4429-b9b7-69dcb6e13695", "value": "768:CIM2+VxW59Xlc9hZLUqNcBSQ0/hx6rNiP4YDj2XH5EovHMvIe3YdK2soWHxZvLyt:OYXlcxxNOSlz/jX2XH5EovmxodKrHx1k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771206039, "uuid": "d153f60b-e123-4b45-9c0f-954db9fe920f", "value": 47784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771206039, "uuid": "1c67b1dc-c85b-4ac7-9074-a237998f34e3", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec23572e-0ad8-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771206221, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771206221, "uuid": "2257dab5-4ed4-4d2c-8c65-5a4dfd230c54", "comment": "Malware payload", "value": "fd0eac8eb5a23344d6a64617933d5c65", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771206221, "uuid": "fc4cd259-38e5-4747-8362-9cc8f224e1f3", "comment": "Malware payload", "value": "cc749f7af9b63a6a5dd3742bbfc3fb30e2fcdbcabda03c1a029aaf10e0df59cd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771206221, "uuid": "159344b8-c9dc-4e33-9ac6-21d59550bf19", "value": "T1A123F29118B70496218CE0EB521BA7B497CBA0959D8CBB875DF7D1C62CE71E4C84CE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771206221, "uuid": "4f084d13-c878-4d64-ba86-02e3439647d5", "value": "768:j/FZi+/KJU+wP6Czbcm2ToD+u/M/q2bGkIiDl:j//i+/KJZwJvcZPbGqp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771206221, "uuid": "edba4fdf-98d4-4dc6-9118-40263c4eb595", "value": 46424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771206221, "uuid": "31fbaadf-494d-4305-b245-2d10f5c5f811", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "efbe0ee1-0ad8-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771206227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771206227, "uuid": "0c44eb46-416e-4e5b-badf-105a1250c927", "comment": "Malware payload (Mirai)", "value": "6cfabb57a14d738d73aa31492a39b8ac", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771206227, "uuid": "37a7c1ef-3f2e-4739-b63e-97457a47529b", "comment": "Malware payload (Mirai)", "value": "f7bca6c187d35153c8a7e994cc325e7eba6fa2e9dc263fda16d1dec16ea6a9ba", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771206227, "uuid": "ca4e6927-cd03-4841-bb06-f631e6a4611e", "value": "T10863189A7CC5C202C5F061B2BB1F51CE375643B8E3E2B157CD19AB29674F8A70A372", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771206227, "uuid": "346b65c7-21a0-4a9b-9105-402e85829bad", "value": "768:Okm+kBE1d5ZVzsKomYtFVQIcS5ac9bGclfRt0GQEfIjgYv9kMsmWh6EJh+Szbyq8:Y1keZrHCk1Z9FPZ64G1UpOI51mRoD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771206227, "uuid": "75429179-adb5-49ff-9a67-7f06e1e105b1", "value": 70724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771206227, "uuid": "af2f263a-ceb2-477e-a856-6fb36bf4540f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2083fd7-0ad9-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771206607, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771206607, "uuid": "171a97cf-245e-4e87-9d1e-bfb0a5158d19", "comment": "Malware payload (Mirai)", "value": "82f8c84fb35ea963e89b9821acf99086", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771206607, "uuid": "d5c189f0-563e-4918-8c52-fd70d6576363", "comment": "Malware payload (Mirai)", "value": "87229a71c7e877481e5bdc03d86ce9a6ac8f75bea5a19bb30387e129c24f8f65", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771206607, "uuid": "b402ecaf-4670-41ab-8f06-246de166b6f8", "value": "T175A32B8ABC85C612C5E1A1F6FB1F41CD372643B8D3EA7147CD18AF29674B86B0A3B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771206607, "uuid": "ad6ed29d-e43b-4c13-b6c9-66fde24f2936", "value": "3072:fbEOv7WUmDaDLGVLIZ5cGe+WRklBaen4:TBv7tmuDiVLI378Rl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771206607, "uuid": "ad6b794f-53e2-42fe-ac7b-05476b13f700", "value": 103820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771206607, "uuid": "dc5ae177-edb8-43e3-a10d-331068620073", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d929b14-0ada-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771206921, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771206921, "uuid": "9a1fd1a9-9505-45b8-87c9-41302496dc80", "comment": "Malware payload (Mirai)", "value": "263f5ee5fc64e0dcfd7ddb2f56da4347", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771206921, "uuid": "9d8c6c1d-bdc6-45c4-b4ee-985aaecfd7b7", "comment": "Malware payload (Mirai)", "value": "ee1e25f9123dd228373d75c28d7befdc2796b1e1d7aa570fe3c81aa5eb90a506", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771206921, "uuid": "c8f8d9b7-07e9-47d2-890a-536cc0944687", "value": "T11293F8CABC858B10D5D535BAFE0E618933138B78E3FA7113DE185B2E538AC5B0A3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771206921, "uuid": "59712872-88b8-417c-80dd-f9b86eb5e798", "value": "1536:zgnutQydoNKIIGnk4WeeEZ6LYfnVMfzsxeWF42LUy1KrQS2lJCidyMY1P:kyd+wGn3WeeEZ6EfnVMfzjE42LUy1KAY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771206921, "uuid": "baab47e7-fdc0-4553-8661-487ea7648855", "value": 89744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771206921, "uuid": "abf36d55-023a-4985-9f11-eb548dbd7ac7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c26ff4ef-0ada-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771207010, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771207010, "uuid": "4b5a7294-0f84-49cd-9ca7-b8826fc20cd5", "comment": "Malware payload (Mirai)", "value": "7de4fdde52890bea3defa059642c2f45", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771207010, "uuid": "68a864b1-d959-4272-a3a9-db40872c77d0", "comment": "Malware payload (Mirai)", "value": "6fd231bf198485a18d9dd214fcc34cafae889477b7eba9db8210fb1ad3987680", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771207010, "uuid": "1dc2ed5e-e1bf-4422-9cae-7cc5fac95951", "value": "T131730ACABC858B11D5C526B6FE1E218D33134B78E3FE7113DE185B2E634A86B0A3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771207010, "uuid": "7059c53e-0fb6-4bdb-996a-c6800f0ab9be", "value": "1536:6mnX9wZ+ux9QSLk83W0VWyE+/YfC1wBZs3f0M/sJMbicPyrDXrQ:do+ufQ83NVWyE+gfC1wBZYxPyrDXrQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771207010, "uuid": "82880113-fe75-4132-9c18-c74bf3ec2fb0", "value": 76624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771207010, "uuid": "dd6839cb-9500-4825-8391-57772c192d50", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "145ee221-0adb-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771207148, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771207148, "uuid": "e8d7bb71-a764-419b-8371-8c97e1e1a4b5", "comment": "Malware payload", "value": "7f0cc1dfe922bab9d0d06f63354ce0eb", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771207148, "uuid": "67fa9b11-a558-4c50-b798-993a0872bf02", "comment": "Malware payload", "value": "9b30622945b1994a2045a2fba4faea695ea2c271524b0c3e436b2c5ff4dcf726", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771207148, "uuid": "ce9cb8f5-05a1-4153-8f4e-7285596e6de3", "value": "T17FB32A6BA7F230783117C719F5D6B728A6ADC163EB020EE3BDB5652D87C229502736", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771207148, "uuid": "71e29a99-0643-457e-86eb-c4430580b973", "value": "768:0G5Zdyp3trT7lGRNjcXscJGcz74k/tHcBhbSj32vrAP0B79GJs:08ypdrXl4kuhbSj32vrAPqxGJs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771207148, "uuid": "6bb0d2d9-6408-42dc-b830-1fe2d7f5ec7d", "value": 115477, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771207148, "uuid": "95d42545-84cc-4e1d-8132-d62d2672f992", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ec482d2-0adb-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771207219, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771207219, "uuid": "55311572-df00-4b1b-b44e-f4d6ab46d646", "comment": "Malware payload", "value": "e8adf89f2c98f913182a1fe543185c04", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771207219, "uuid": "6248a60a-e3dd-4d54-b6f1-d44e140e75be", "comment": "Malware payload", "value": "35e257cd11e0ff2343a818a08870567266c8ad33c980ce59637e9e1efe792f1a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771207219, "uuid": "310e753f-c608-4f13-83ba-646172371fba", "value": "T1A613F1C9BCE4D89F090C8737948366B9EADBA11E6352079D5563D3F2F0E5040EF29B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771207219, "uuid": "58dd8ff7-ad6f-400b-8e9e-1a9f6c2dae25", "value": "768:RgRhzZI3gg8tG7srlB0aDbEJbtWTlByerWThTB1cCLuXBsiaxAot:mRhzZI3gg8tGUlB0aDAbtWTlAerrCJi+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771207219, "uuid": "44f3ae86-d1e4-4cf5-bf50-f78069323fe7", "value": 43752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771207219, "uuid": "6397ff40-d004-4d8e-8b14-352edba8c75c", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94abb2bd-0adb-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771207363, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771207363, "uuid": "cbc92253-6461-4df7-80e1-d04ea57d4d22", "comment": "Malware payload", "value": "9ef16bbfe9b6cdfa026ec644a2046529", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771207363, "uuid": "ec9b03ac-8e31-4cf2-a78a-92ebfdd5909c", "comment": "Malware payload", "value": "f46e07875b25a278dbcf988ec0038882aed7904e7f540c603f50d996025284f5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771207363, "uuid": "8b15edbe-d87e-4923-a505-eeb03ee78cba", "value": "T1F113F2FF98231B68ADD371B6884511B71509B71F4C8EFAA2D440DCFAD8A06CB2551F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771207363, "uuid": "dafe9972-1853-4bc1-b57b-e4752493f1b4", "value": "768:lhqTerfS9Q/oL8G4FQXW7oPnTwshB6gDwUHxRyIx9rKmtuXMXR4lPOqlxR:yTnhtBm7hUbLxxnmV8kfR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771207363, "uuid": "632bb6b4-c6af-4c6c-84a8-76056d832bc8", "value": 44500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771207363, "uuid": "0c0f0d0c-a4b6-40a2-808f-4b3a4cc3241e", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2b4ba30-0add-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771208272, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771208272, "uuid": "2aa96a26-5768-467f-983f-045b75b7d393", "comment": "Malware payload", "value": "03565ec2fe9c0e65d2d31618aeb0a649", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771208272, "uuid": "fbb0d3b2-fde6-45bd-a44a-753e128c313a", "comment": "Malware payload", "value": "58a6f0e5f7dafb93f267e7da4b5f747cd901ea252691f9348f2f3d9efc9fa8ff", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771208272, "uuid": "a124c607-0877-4bc6-8613-12195608d0ed", "value": "T107647C11B9C48432C273383147B4E2B28DBDB8302D655B8F57A81D7A9F745D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771208272, "uuid": "c41faea2-47f5-493c-bb85-b8f1664c11cb", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771208272, "uuid": "cbec8573-9d83-48fa-8a81-df7aef7d056d", "value": "6144:dmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9h:Y1iw7gryNkSV1hy1Z1u2JLu9h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771208272, "uuid": "6ac573ab-00fd-42d5-92cd-65fa7d81b75d", "value": 312632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771208272, "uuid": "f7af3ea9-663f-45f7-93e7-f2fa72c3dc98", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca7f2148-0af3-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771217761, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771217761, "uuid": "65ab2239-77de-45ae-a734-2f28816e8ae1", "comment": "Malware payload (Mirai)", "value": "ff7dcbaa033e9560e4249033d20a986d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771217761, "uuid": "c53a773e-064c-42ed-8bd7-5b0f651858fe", "comment": "Malware payload (Mirai)", "value": "04057b6549de9fdaeb87498ef5fb504ef62b85d715b3bab241f4e91c467b984a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771217761, "uuid": "a145965d-f01f-45bc-9257-8b9fdbbc30f8", "value": "T1EFA30607FB611EFBC8ABDD3342A90B0534EC951A22E96B767970D828F54F14B4AD38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771217761, "uuid": "604f020b-8217-449b-975b-41a3292e394f", "value": "1536:vOH5HhJzOt53aQyJs8epfy8Iz+LArYUh3cVNZV3hC6RtanzJ8:vc5HhJg5KQBIYUhGNjR4nzJ8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771217761, "uuid": "97fb2875-b7c8-4076-b429-64a9282e3bf6", "value": 105860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771217761, "uuid": "2e2adcf9-9c31-4437-a4c3-9a7c7a601508", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af377981-82bd-11f0-9bae-82aee05be84a", "comment": "Malware payload (XorDDoS)", "timestamp": 1771221855, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771221855, "uuid": "9bc5da00-5ea6-43fb-b205-082052bded55", "comment": "Malware payload (XorDDoS)", "value": "71c70f7896d347b9a9d3873f6594bed4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false }, { "name": "Xorddos", "colour": "#d055b7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771221855, "uuid": "f0abbaf2-de1e-4605-869d-c7647b513584", "comment": "Malware payload (XorDDoS)", "value": "c3714fc0446a1adaedbc86e3dd0b2121e65b34cc3d40494f709c6873fa0d56bc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false }, { "name": "Xorddos", "colour": "#d055b7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771221855, "uuid": "61043a66-4aff-4f77-9053-b26b181c4db8", "value": "T120C45C56E383E2F7C82705B0134BF7BF4620B6359461CD86B7989D5AB9338F22A4D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771221855, "uuid": "f1bd6078-1aca-40c0-9ab3-fbf853d03f92", "value": "12288:4Ufrcn+vwK5ripVU4tdZ1pNL/pVbz+66ySjQn36Eoj:/fUywKQ7Fb1pNL/p5+fjQn36Eu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771221855, "uuid": "41985712-394a-456d-b01c-38143faeb474", "value": 548616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771221855, "uuid": "0613fe45-45ea-4e27-b8e7-9b492af0fabc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96d17f2f-0b01-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771223687, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771223687, "uuid": "d49ae256-cae2-4322-98bf-0ac221ca1842", "comment": "Malware payload (Mirai)", "value": "db66f2d21b036032316950ff2f4bf79e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771223687, "uuid": "d8c21ea3-3e67-494a-8051-1691346c1d50", "comment": "Malware payload (Mirai)", "value": "a1c0688868325690a83d52ae087dd6b422000e1106f9fa9c081ccf65d187748b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771223687, "uuid": "fae4dfd7-6506-4e19-ad20-6534e32f2e03", "value": "T194834A81B941AB26C7C116BBFF5F018D371597D8E2DA3302CD281FA0778A96B0E677", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771223687, "uuid": "e335a394-8f19-4bf5-bf1e-6e1bb44eb9ca", "value": "1536:uVTuTV6yz5aj79RD6PP5LQClbz6E/tU6TT5jkFOxXeEEEOb4jM2ogJRnz3:uVTip87naPpBbz6sUa5gOxX5i2Tnz3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771223687, "uuid": "f6d90a82-57af-486f-b871-cee991e7711e", "value": 83264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771223687, "uuid": "7c26265a-9902-4f1d-8f3c-17a46e635e7c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "460a9255-0b02-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771223981, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771223981, "uuid": "5b2cc0de-2f64-4365-ab9f-24dfdd51ff2d", "comment": "Malware payload (Mirai)", "value": "d0010279e59b7fcd49daca1287ecbc70", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771223981, "uuid": "d00185a8-e4ec-45e3-813d-de784594e6bc", "comment": "Malware payload (Mirai)", "value": "368f9205069d626e12ffc68b294479860f1312035ac6d0d235ff4e79adee87a5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771223981, "uuid": "3a688e24-613d-4841-be20-3a2c283b640d", "value": "T1DEB3E607FB610EFBD86FDD3741A9070634EC950622E86B763A74C928F54B24B4AD39", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771223981, "uuid": "9149b43e-32ba-4420-8ef9-da999f1d6877", "value": "1536:m4NQnwPTQ21TYxrJbobiHBae+aHvNzKGpKydtSduAdZ4tJZqBynzi:mSQnwPFh2NciK2Zdt8dtQnzi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771223981, "uuid": "9176d1bb-1ace-454d-99f0-44a3e9497cdf", "value": 118164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771223981, "uuid": "1cbdc4d0-d3d3-45c8-b0eb-24ca550f9e8e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "746cee5f-0b03-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771224489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771224489, "uuid": "445a250d-4ebf-4725-a4f0-6cc32cf714db", "comment": "Malware payload (Mirai)", "value": "1376c786f14aad14a051d125857cd996", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771224489, "uuid": "523ce889-3daa-43bb-8deb-4783d0df024e", "comment": "Malware payload (Mirai)", "value": "d2f9f8e1cdc434d24e04c798032bb46c3423c050161c55cdc0e5c1b11b46d464", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771224489, "uuid": "624cc9d6-744c-4fc8-8557-408f326b86ba", "value": "T118A3D91E6E15DF7EF769C23847B74A21935833C62AF1D585D26CEA005F6028E241FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771224489, "uuid": "2f7c357c-711a-497e-88c2-90c9befd0204", "value": "1536:Apx4PUN82TPYS67loKXkW/wB/TFsJGiJGnqGM5RL6yfZGpHkDhVeJ5jnzukc:cx4V2TPKkW/wdsL6yfZGh+CjnzuB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771224489, "uuid": "dfc74d5c-83b7-45da-a499-b51d058e2bab", "value": 105860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771224489, "uuid": "14826cd7-cc3c-46b1-ad86-f5f66bdd7d34", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8be20d8-0b03-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771224711, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771224711, "uuid": "cb9dcccd-2134-432b-976a-91d1321b085e", "comment": "Malware payload (Mirai)", "value": "f1a9ff8e3c66fa13ce0b16a2f72e3ba7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771224711, "uuid": "59b56e81-7af9-449a-b01c-9edb0ae7f0df", "comment": "Malware payload (Mirai)", "value": "3c1f294549f1beef7975a81716e96ad3fafa25f6e2b4de14b9bd14e4bd10268b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771224711, "uuid": "e1dc70a1-7f46-4c81-b6ad-c6f9c7c81086", "value": "T1B0834B85B8416A26C3C116BBFF5F018D331697D8E2DA3307CD281BA1778B95B0E2B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771224711, "uuid": "e27aac74-e452-4122-a824-20c9e5def83a", "value": "1536:2plvm/Tfc9Ki9rz8ytErxXp15QKaelbzh8t4lc45j0Ytx7JzEEOjU4T2R+v1nz3:2plvCTVi9X8NJp15PXbzh8495dtx7RYB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771224711, "uuid": "ee98c96a-33f6-400c-887d-04447536214b", "value": 85516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771224711, "uuid": "24368ae8-2bcf-4d7d-89bc-345d4278bd45", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d0f8352-0b07-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771226194, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771226194, "uuid": "67d1bcdf-93a8-4e7c-bf0e-6e812b627594", "comment": "Malware payload (Mirai)", "value": "860435e0ed11fe15aeb0294d0f8ba4b0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771226194, "uuid": "a570e86f-45b6-4276-b484-15bfdbfa6879", "comment": "Malware payload (Mirai)", "value": "b687ce56d7497689a7efd684db96612cd59d68194429e2f007fd745540317e29", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771226194, "uuid": "369233b0-5f66-4177-a059-3f859a9f6cb8", "value": "T167B3FA46B9519B12C5C721BBFF9F01493343AFF8D3EA3201C8245FA4678A9DB0E667", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771226194, "uuid": "71e362cf-1b30-4ae4-8fab-996792769594", "value": "3072:7Y7Gg/o38DG21MhGzZx7CaPKahPe7EUZXtODKBU6JnzPci:cGg/ZGGzL7CaPKahPe7fX4wPci", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771226194, "uuid": "5721c2c6-7f2c-4914-8303-93617805dde3", "value": 111460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771226194, "uuid": "c376ad7f-6ece-438e-a511-ed1810d9fd3f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd6b44b5-0b07-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771226356, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771226356, "uuid": "ef1d06cb-38fc-47d8-90ae-12e19ab98a94", "comment": "Malware payload (Mirai)", "value": "373792ca80b7ae587ad0cbe1952f23c6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771226356, "uuid": "117cbcfb-2024-40f3-94d1-279f1a057af1", "comment": "Malware payload (Mirai)", "value": "edb6c47ea9543d3d26eec5d5406704cdb0154b75b3dbdefa86b3daa7b7b84dc7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771226356, "uuid": "883ea30d-81a4-4312-b901-4833a0244210", "value": "T1B6B30A46B951AB11C5C321BBFF9F41493343AFB8D3E93201C8246FA4778A9DB0E676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771226356, "uuid": "76e98b0d-4bef-4ee0-a835-e1903c787fd6", "value": "3072:0gcozKGjb121MjBBZx/ahpA3xrchaSepsBjpLJnzhQ/a:4ozNOsBBL/aXA3xrchNeU5hQ/a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771226356, "uuid": "b64609b5-6cbf-429c-9b37-0e40f17d6a77", "value": 115632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771226356, "uuid": "1d6c77bc-c361-4293-b255-14b0d91957f0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6fce2a58-0a71-11f1-8369-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1771226672, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771226672, "uuid": "5c156001-8686-4b64-ad46-6f6d605e528c", "comment": "Malware payload (Gafgyt)", "value": "95d929fa2cd5ab401e4f4c203aff05de", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771226672, "uuid": "c0f6c7cc-7020-492b-9e4e-a3ae8d836e95", "comment": "Malware payload (Gafgyt)", "value": "8f17f85085f91981089860713c6ae572db5bacc4f5338b1c58d06ae1b7bff5e2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771226672, "uuid": "0650a7ff-027b-468a-a405-db37bd5b3aea", "value": "T10FA32902BB0D0F43D1632DF02B7B1BE1979AFDA119F4A580652EFAC65274DF22142E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771226672, "uuid": "2593061c-6c0e-4bb7-8db0-26ce9466113b", "value": "1536:YHPCvr9XSzNUf7jlAk/xNsa92Qav/HmdttzSa6wrW4Wi8fJFGPkdfmPoMVIN:YvYW47Ay2Qy8DxlW4WrfIFq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771226672, "uuid": "2041e9db-fcc3-4201-b882-14c211a8f795", "value": 102960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771226672, "uuid": "bbb1c298-4ac0-4eee-b01d-955930c5005c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ddbe8fd5-0b09-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771227242, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771227242, "uuid": "cd1821ef-6c75-47fe-9730-e7aa5d35a6f2", "comment": "Malware payload (Mirai)", "value": "1d6300d3b8e01f9f061fafa7ffdf7f74", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771227242, "uuid": "f15a38f7-87a3-49e8-8c55-c59e9da27d80", "comment": "Malware payload (Mirai)", "value": "4e77f66a0d6aea463c35eaaeb9d1c3bfb8ec990a777768111e2423085d50b0fe", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771227242, "uuid": "c15937e3-0ddd-4fdc-9137-cd1f69329a90", "value": "T19C933A85BC41A626C3C116B7FF5F428D371657E8D2EA3212CD281FA0778B85B0E2B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771227242, "uuid": "0e33aaec-8e3a-44b7-9387-83cd2c8d8687", "value": "1536:NUkuvDWWKSNw9HzYvlBeBJIsoR/wO7elbzH8t4LrB5vqWjbCMpIdTkO+j9366rGe:NUkuviWc9TYlxDibzH84R5vFjbCMURtG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771227242, "uuid": "b6c6a40d-e46d-4c19-9d4d-6203e6a11d19", "value": 92232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771227242, "uuid": "d1ffe23a-9370-41a1-af7f-3c8ee886118b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9b005bc-0b0c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771228443, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771228443, "uuid": "7894b695-cb6b-49fd-a002-7306e1137cbf", "comment": "Malware payload (Mirai)", "value": "c6f5bbf892bdc449a659d74b75792061", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771228443, "uuid": "cc87cc9f-55e7-496d-891f-f399ad767ed0", "comment": "Malware payload (Mirai)", "value": "48f0ca47942dc2fa47f4f4249dad46632115f627eb457fe8ec893a4d27647b95", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771228443, "uuid": "e43d3a2e-acca-4380-8eb5-6f2f08e1529c", "value": "T17D341889FE18A72BC3D227BAEB1903CE3339875877E7B2115D31197437C6B646A271", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771228443, "uuid": "b0b7f8ab-8255-4ae9-b617-b5a2ff1e72b2", "value": "3072:u8xfURvtfIF79PxMJEQpXijsbiATW1QEH/Yu024TZfnROwrZWpMva7m2Abr:5URv5IZ48fCT5ROwr5Igr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771228443, "uuid": "1c7005c5-fddf-4528-bb15-d7f236befa39", "value": 234911, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771228443, "uuid": "f2e07690-45c4-4234-945f-708848fe0c7a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ed02180-0b0d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771228720, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771228720, "uuid": "1ceb368a-8da9-4cb4-9eae-b18d8e6acd88", "comment": "Malware payload (Mirai)", "value": "c3e92b269b193c5bea02e891ffa0367c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771228720, "uuid": "64682ab6-525c-4525-b782-4eb6e0295a77", "comment": "Malware payload (Mirai)", "value": "da5172a695b309b9f909c3df14c849343d527ae21c46e861d4d8dbd24e10ad1c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771228720, "uuid": "e0d28e74-663a-4b37-92a0-d92e75413261", "value": "T1F9B3E91E6E209FBEF369C33547B78A31A35833C626F0D685D26CE9051E6038D245FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771228720, "uuid": "7cde3454-f1fe-4547-b8a0-373c33a050dd", "value": "1536:O91a1kc02AUo2VZ7OMEjK/QBxKaxK5RKeAFdMH7Pxed1N8ke72lnzqdh:e1Yw2AUo2GMEjL5dMH7PxyN8ulnzqL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771228720, "uuid": "32b61db0-9dff-424b-96aa-295309296d93", "value": 114068, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771228720, "uuid": "ff921b91-b27f-4e72-a485-36d83df6d740", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9182d97-0b0d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771228979, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771228979, "uuid": "6f22ce5d-5f9b-47ac-9347-71e10f05b2eb", "comment": "Malware payload (Mirai)", "value": "204c1931e6e7b531695731c8dc1c1f55", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771228979, "uuid": "1b944b24-c0a1-4e0f-975c-97e13d681a09", "comment": "Malware payload (Mirai)", "value": "41454808ede0813cf88029de260e9d2827f91b7af2476faf4a2fe4757f8469c0", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771228979, "uuid": "4c7510ef-ccac-4993-977f-873780fd8ee5", "value": "T168933A85BD51A622C2C516B7FF5F418D331997E8D2EA3203CD281FA1778B85B0E6B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771228979, "uuid": "b02ef200-83aa-4bf5-afc1-3202f3929070", "value": "1536:voPQEUMy/Xf7VnSl+NTLCcAWClbzwE/tUIt05ZFfTXesxU0TkOuGi6cvGoEnz9:voPL837hPeV3bzwsUR5Z1TXesxLc9EnJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771228979, "uuid": "08613a7b-c684-4cf4-ba46-55842fa87c3a", "value": 89200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771228979, "uuid": "879c2870-7605-4c9c-ad34-5fbfe20ce5eb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11035a70-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771229046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229046, "uuid": "ecde245d-1599-4dda-94b2-0f6a7183830a", "comment": "Malware payload (Mirai)", "value": "b13844bb2c843f07ee75a4df4b5f5b87", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229046, "uuid": "4172c007-4479-4ade-9f36-aff2b0db1aff", "comment": "Malware payload (Mirai)", "value": "375dab2e9bec9e885e1566779b36ea103075964ffa6f15c1d59f5aa140058e46", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229046, "uuid": "cb6150a7-1c31-4c3e-8f35-7e801d9e906a", "value": "T1918329792885F66CE9F650B8F45329E619120A083FDCD1E36893143BFF70B48B16DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229046, "uuid": "6c0444b9-b589-4416-aa95-7b4ee9185200", "value": "1536:d2qnPb9iSGa83jcZU7N8MPAVBIVCCfy0K96KEBS:AkPb9i9jmU7jWue", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771229046, "uuid": "5f50b2ce-9801-4bb2-97b0-d25e02309458", "value": 83328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229046, "uuid": "00ab3f6f-2369-4ed5-a601-0f3605524693", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e1bbe6b-d022-11ee-bc29-82aee05be84a", "comment": "Malware payload", "timestamp": 1771229115, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229115, "uuid": "c2cd4c6f-554f-4578-9ade-1f0f86c47085", "comment": "Malware payload", "value": "10a8f5d510e982a58debba56b4cee038", "object_relation": "md5", "Tag": [ { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "linux", "colour": "#fe4864", "exportable": true, "hide_tag": false }, { "name": "shell", "colour": "#59ed1d", "exportable": true, "hide_tag": false }, { "name": "tgz", "colour": "#bfd520", "exportable": true, "hide_tag": false }, { "name": "Tsunami", "colour": "#cb6771", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229115, "uuid": "367453a0-a1b9-4086-9ac9-42f552968e39", "comment": "Malware payload", "value": "d91701e62fc85c7bf75a29c5878a874f68af16207eae3dff8f3e771a6b7ac297", "object_relation": "sha256", "Tag": [ { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "linux", "colour": "#fe4864", "exportable": true, "hide_tag": false }, { "name": "shell", "colour": "#59ed1d", "exportable": true, "hide_tag": false }, { "name": "tgz", "colour": "#bfd520", "exportable": true, "hide_tag": false }, { "name": "Tsunami", "colour": "#cb6771", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229115, "uuid": "91c1fca5-6810-4cfe-9c2f-9d3bf0a64731", "value": "T1BBF2E1C8852CD6F69F90F05C0DE545BE61F305335EDB38A3C988A5057DA8E93B1265", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229115, "uuid": "ccf7f9b1-fbe4-4565-82f5-9e24a87a551d", "value": "768:ZWbIn2PJ58DlvC5qk7kPKmWtEDWTEu8SArFdz5VFuV:Zc1PJ5+ltOkPKmWt8WFfArbm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771229115, "uuid": "09a39dc0-c220-4128-86a4-0dd45a329fc0", "value": 35688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229115, "uuid": "3d8e6200-2606-4e91-84f7-ce0f823de62a", "value": "application/gzip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a2396c7-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771229115, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229115, "uuid": "deb72bff-5225-4e64-a836-a6bc36c13254", "comment": "Malware payload (Mirai)", "value": "89228deb4c3a70afe0c8c1bed5fb6912", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229115, "uuid": "dcec98fc-ea70-4255-94f8-fcc8fcdf62a4", "comment": "Malware payload (Mirai)", "value": "3c8f3746e5682ea28abe8c309fa520cce012c1dcfbf12baccef6216aa2832f50", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229115, "uuid": "cf53a1c0-418c-48de-9594-9eb51ae94e0f", "value": "T1B1739EB6D1685CB4C4404A74B5A8D9B44B137504A2B33FF2CA828F695407EFCF61AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229115, "uuid": "c75accb2-02ff-4e88-96d7-21bc37122102", "value": "1536:+/OPr5Ca1yuRikC4hESIFkCFUPnAkyCHn9:+arkre3SSoXFinAky", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771229115, "uuid": "3f584583-a87a-4444-abee-7319f639b6b8", "value": 74832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229115, "uuid": "80eb27d1-0479-45d1-85a5-855d3fccc829", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a37257c-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771229115, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229115, "uuid": "05cd117f-bb92-4313-8a75-8a6581b80176", "comment": "Malware payload (Mirai)", "value": "79714e53e516f8e0ea7b80de32c28877", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229115, "uuid": "ada43a33-36b4-48e0-aec0-6310184e11fb", "comment": "Malware payload (Mirai)", "value": "373a50f9d62f471cfb23b05a3ab79cbc345255c1e9a91846d7ad9a26d9d8f2c1", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229115, "uuid": "e324b866-c85f-4cbe-97c1-01d8f9b6c377", "value": "T183E3F746BD419F13C6C721F7FBAE42983B166B6DD7EA3103D8256F50378A4DA0A362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229115, "uuid": "0515ab6e-88fa-4096-959e-53464602b54f", "value": "3072:h0bfTJL1ZNOPN3J4gbn73Y/WIelo/Qbz:WfTBNO13J4gD73Y/Ws/Qbz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771229115, "uuid": "0be9d884-308d-42d7-a998-bf0608755f25", "value": 147088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229115, "uuid": "06e79080-50ff-48e1-a1c6-f7d6c2864e2c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a373e9a-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771229115, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229115, "uuid": "28cb5052-b58b-4577-a681-1efd7cad5a4d", "comment": "Malware payload (Mirai)", "value": "40376b90d1c34d1aec6e7467b38737a3", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229115, "uuid": "4c461ea2-6517-4fd6-a57b-5a3652307e04", "comment": "Malware payload (Mirai)", "value": "ecb273c3d2fb8a4483e215469cb179b697704df2ad5f58926496d5e7dd158fd8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229115, "uuid": "491f4b3e-91d0-4b4a-996b-6f8bbb243192", "value": "T193830682BC40EA16C7C11277FA6F108E331567DDE1EA72429C251FA07ACE91F0D6B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229115, "uuid": "7dfda466-d78e-48ae-ab78-02606e7cfa64", "value": "1536:4+mjogLq1cMevK6uwqTbh6t7VZGC5NwDe8UV0B8t46/OKp7hJHFz:VmVScJqTl63vw68u084YOi7hJH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771229115, "uuid": "4ecd251b-a36a-412c-8b16-96b10f7fb7ec", "value": 83120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229115, "uuid": "af3a44b6-b225-4ebe-aea4-6a4035e12f56", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a3800ed-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771229115, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229115, "uuid": "9e697322-c706-46d9-a8f7-fc2db0365adb", "comment": "Malware payload (Mirai)", "value": "a6bbb7b5efc9e17a01ebaa9741e9f74a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229115, "uuid": "82c31636-3198-439d-9773-9189d5c9272c", "comment": "Malware payload (Mirai)", "value": "ff884b18295b7250a7f0b09d235839cc3c8a3e80355f3d19dbe72965d62796bd", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229115, "uuid": "f23b0386-0de7-48c3-8bbe-25d3cdf5f5ef", "value": "T11CD3E842BD418F13C6C322F7FB9E42987B266B6DD7EA3102D8257F54378A4D60E362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229115, "uuid": "c80dab6c-6197-4108-96f9-681b4f463a3f", "value": "1536:nh9HoCtxP+p5962fNknd2UoeI4V5IA+b+usuIulLOwywyIQjv3vwxzytPP7y3F3F:n3Iah+p7Gnd+4oA+K9u0vwG7ehmzQz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771229115, "uuid": "f9f2b8c4-81c2-4e25-a1b9-e2f8a6c4ac3c", "value": 142992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229115, "uuid": "5230ddc2-781b-4c3f-b772-2a46720ed769", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a3a1755-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771229115, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229115, "uuid": "70186cd5-4e40-4fb8-85b8-f5e5dd1bbc06", "comment": "Malware payload (Mirai)", "value": "aac39174b8b744bb42327938dd447e8d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229115, "uuid": "adabe48a-b34a-4475-accd-2a59a9188040", "comment": "Malware payload (Mirai)", "value": "495058786666d3baa811c488a19fb88be607a9d9cdcbe8a7223c2e4b75a3f4b1", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229115, "uuid": "97ddb2f7-3e64-419d-8c9b-54ac0c2481e0", "value": "T18DE30706770D4F03D1532DF03B7B4BE0836ABD5228B9E584711AFEC993B19B2A506E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229115, "uuid": "58c830a4-a597-4bbd-be3c-931d4d1c0186", "value": "1536:7BCb1yIvQ9tve107vkeveR2xlbDiOU2q2g89QiXnvAKuHmGOcRiQreuA7avDRrNF:ob1yYQHve1pAeYxtizG9QpKzQrNRrrcI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771229115, "uuid": "4a595f99-d51d-40a2-97bb-14a20c60bc21", "value": 151352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229115, "uuid": "c1531f2a-cea1-4c75-a59e-692535d4c47c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a4cefad-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771229116, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "42913400-bc44-456c-98c4-21e76a972870", "comment": "Malware payload (Mirai)", "value": "9acbff3b9949ab928e486ded6a35d9fc", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "13bc0ccb-99ee-4608-b457-6ce7ba20009c", "comment": "Malware payload (Mirai)", "value": "79421547a1f520da7ce7516916f9475dc1d39c3b87811e173e9bfb52bd7d66a9", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229116, "uuid": "f0b88089-dc4d-4664-bb74-87b7a05286d4", "value": "T15F834B46E687F9F0DC4109B8116BFB35D936A8323130DFF7E7C4BA57A999242A0532", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229116, "uuid": "bf97331c-fdbb-4149-bb88-30bcca47b2cd", "value": "1536:IPQbusEfwO5cpsfyL88EdJsxK9wKamctYd3M0SD7zqmCCkkt:MQbJYwkxy8sxuP6vD7zy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771229116, "uuid": "9263e968-520f-4e74-9e4b-79d72ae1f5cc", "value": 82520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229116, "uuid": "6d901549-a0ca-48e5-b1f7-408c29fb69a8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a4e74b8-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771229116, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "c13146ed-d60a-4ac6-bed4-74f657c59a0b", "comment": "Malware payload (Mirai)", "value": "ff14534a7a6c2ceea573d7378ad62f56", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "b573b106-9334-44ab-9caa-cf932fb379f1", "comment": "Malware payload (Mirai)", "value": "e9f92ade1cdf3821c1a3a739eb6545e0bcb22a856c0fe0070f955efe2a3179a4", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229116, "uuid": "a7e55fa0-1073-4aab-9b3f-24f29bfb2c8e", "value": "T155730882BC40E62AC7C1177BEE6F109E3310A7DDD1DA3246DC154BA47A8E91F0D67B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229116, "uuid": "2c0af5bf-f33f-49cd-bc55-aa595409b135", "value": "1536:tNYOXMpfgaS5qD5uU+sVzctI5lBxWlPUiJzB8t46q7galh1zt:l8pfofe3BxaPUYd84B7Tlh3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771229116, "uuid": "add57538-4da0-4886-832e-dc8c37c725f8", "value": 74984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229116, "uuid": "0e76d2da-1e3d-4028-a474-f36ebbc168c3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a509cc0-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771229116, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "c722d808-6e06-4f83-bc49-82223698eae4", "comment": "Malware payload (Mirai)", "value": "9cd7eaabbb16d39fddc13b5986903a92", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "508902dc-dc49-407c-9b14-18983b0f159f", "comment": "Malware payload (Mirai)", "value": "f1939cf1d802e9f819b996dc3fbd5b5c3eb30921a449cc6d7ae7bc7461c7c61c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229116, "uuid": "d701c26d-c420-4c2b-b108-0933ea9a6040", "value": "T154A3820E7E319F7DFBAC823847B79A219209339666E1C588D19CED025E7434E341FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229116, "uuid": "fc7a49b5-0970-4af2-adbd-7cac990ccebb", "value": "1536:nFAoUgB00aLmv7pibxxIm1IjdnD1KFcT6PHDz6aNoXfyaHwMj:FLUgBF3pibgm1IdnRipPHDz6aNoXv5j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771229116, "uuid": "5e52033a-845e-4dd8-8e22-77625a4f844f", "value": 105376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229116, "uuid": "a872ad91-46d2-4946-b777-fafe1ecbd39d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a53c7d4-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771229116, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "894af8d0-e1a3-4364-b90f-dcdc9268807a", "comment": "Malware payload (Mirai)", "value": "84bf32aab5e6708fe387c62783e9f129", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "9e95d259-d1c3-4f94-898d-2e1f50922ef9", "comment": "Malware payload (Mirai)", "value": "b2feaaf1ca43452cbb5aa24d6100cffaa704b6ec196e2f35e528c034308d05e9", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229116, "uuid": "97e1a322-6428-4384-99d3-86e2a0eaca49", "value": "T1B24308C7E353C8F5E84325F011ABEB798A31EC712260D976D7E5FEA759625C260413", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229116, "uuid": "42142158-b772-44e5-ab15-2c2b1f998d9d", "value": "1536:MJfvefm6jSrRNExDoQzKVGTkJ/Cu32j8M:MdW74ExUTVbJK+t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771229116, "uuid": "c1c7b071-e2ae-4130-ad6c-6ab67439c61d", "value": 57780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229116, "uuid": "10a7a8ea-a17b-475e-a8e1-3fbb710a4c74", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a55efa2-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771229116, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "7207beff-6167-4bbd-81d9-62360ee4dcfc", "comment": "Malware payload (Mirai)", "value": "b840d5c04960f170824893570f70e913", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "209709f9-0e7a-4f81-a75d-b1b7e8dc9fcd", "comment": "Malware payload (Mirai)", "value": "01eaee3b249950d33c2b7c06113cbb342e0681291f6f76ecf20d86eb88aba310", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229116, "uuid": "2f294a1d-5db1-4e2a-93f4-4d52c5c21f2a", "value": "T1F6734B0137548E07E9EA0EF9282F17E483BFEE4021F5F1856A0EA75A4235F73545AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229116, "uuid": "e2b9d2d7-ea0d-4d6d-8ed4-399fa69b3282", "value": "768:v8KmKlUhpiGqqRMQRJqsF5JRXeSe4wsganGNEy+uHne+Amr6U0JhaYW++OchU5dR:L4l9fTwsg1od1W++OnNdCNTHemXR47", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771229116, "uuid": "b723c420-2444-4d30-9205-fa5a3dac7a02", "value": 76976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229116, "uuid": "e83e7349-aa9a-46e4-88a0-b3a83df9d4bc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a6a4f45-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771229116, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "96c8eccd-6b4a-4adc-b669-e8b8917a838e", "comment": "Malware payload (Mirai)", "value": "acc025d06fdbeb467de83b9a40cb4a30", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "3c33887b-87f5-4d97-b4cc-42937d450b35", "comment": "Malware payload (Mirai)", "value": "bf178ed57633c1d44a944e0458ece64735b156fbed3f9481aa1c3a02fa53a01c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229116, "uuid": "7a281f33-6107-48ce-99b7-51e8a8f9aa2d", "value": "T11A732A42B98586EDC088E53807BF7539C416F4BD1379B1EB37C0BF1B2809E611B1E9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229116, "uuid": "794889d2-43f5-40bc-b72f-81813b8268e3", "value": "1536:ON6Uvn6A2QP/RWnAIJUtRMXGXe1FXJVUMvTCYXczYffjkE9:M6y6g/R8AIJUtIfXJVUMbCYXVff", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771229116, "uuid": "a0061f41-3312-47e1-8d03-960e8f05bb26", "value": 79552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229116, "uuid": "d4cdedcd-aeb1-4cf4-9fe0-3f0d7d526f6e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a6fa70d-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771229116, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "7395a183-8279-4273-8d40-b71983adad27", "comment": "Malware payload (Mirai)", "value": "132253f6d9d0453eced72aca647d293e", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "d58a0749-6ad8-4c15-9947-2c81845c95a1", "comment": "Malware payload (Mirai)", "value": "76f9c5aa8dab0c57211b0d51ecd0306606a852bcdefaeb08ce3245b5f3384b13", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229116, "uuid": "0c5224c9-95d3-4fdc-9bfe-394329ae1db5", "value": "T15E24C5067F919EB7C86FDD3706F68B0128CCB45725A43B3A3670DA6CB91A54B09D38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229116, "uuid": "a92a505a-3fef-4610-912d-7ca0e3eb7d99", "value": "1536:zJrri2wB/BsyUk0Z8/SnxvhjehFGZyInxNcjb9rEtGESG8fqsZyh83ZCNNmaQyjp:z9r5wB/j0+Ojc8nMjbG1WZaQRUysDHp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771229116, "uuid": "91cdab37-f452-49b7-a3f0-7ca70b0b43eb", "value": 217892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229116, "uuid": "792829df-e490-41af-a83b-a6372b758a95", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a743cce-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771229116, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "0aafaff6-a6b8-4417-bb20-80924b04f166", "comment": "Malware payload (Mirai)", "value": "4d874b92d704063fe11bcce34274aa7d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "1c861a70-9125-49df-a0d0-bb5db4cdd4c6", "comment": "Malware payload (Mirai)", "value": "fa7ce9e3232f1d0b8c990220bc40e65ba4d26a3bceadc648964cbdc15ad3fa06", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229116, "uuid": "63cede3c-9096-4835-b91a-85b5c653c6a7", "value": "T17EE31A077AC1CDFFC886D1F04BEA68358A62F92D1535719B6B94BEB11E0DDE12A1C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229116, "uuid": "c6d81f6d-8c20-4455-b46b-006a5f51cf3d", "value": "3072:3AoL43t1s+cNu8tecsNXWqeW2ewskJ+Y0EWa6OiIjThvWf5ml:/L43kgacKNW9OZj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771229116, "uuid": "ed1985bf-e34a-4de3-8d0e-492233fff726", "value": 156752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229116, "uuid": "ba2413ed-ba60-4b21-ac2c-07b0ca9d9704", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a7e888b-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771229116, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "434dc5de-210c-48d2-ad87-ea99badce8c6", "comment": "Malware payload (Mirai)", "value": "93b2dfc150bd892293905b22563f5443", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "520b0ef5-c344-4c39-9c39-1735bf945388", "comment": "Malware payload (Mirai)", "value": "070aaea98ea6bc9e8a0321b6082d47b0e856d2dd8becd3dc44ca01f609bfb395", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229116, "uuid": "c0decf86-8539-4b1a-aafb-cc44e7139ba9", "value": "T173B3830A7F600EF7ECABDC374ADA2749249D141A21997F75BD34D818F24A24F19E78", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229116, "uuid": "c3a36057-cac4-40ba-99ef-de4f49991f8e", "value": "1536:cbQvWVAo+/D+jr8Cm3tuW8QB1x+dYwQ3sZINs6uZaCyJsz:c0vWVAo+/D+jNmd38QB1xmn6u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771229116, "uuid": "6e59aa9c-abe2-42aa-bbd2-20a691e6e993", "value": 108704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229116, "uuid": "c7bc641f-7d65-40b1-9bf0-7c6662f15885", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a81b3f8-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771229116, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "ca0de35e-a026-4d3e-906e-1477cf0d72b5", "comment": "Malware payload (Mirai)", "value": "137b7b71f928d82601d1364aa27bc65a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "e65334a5-7d25-4c5c-90b8-302531943de6", "comment": "Malware payload (Mirai)", "value": "8ddd1839e5678dade2bbc568e93419d62450cef2aa23ee0a380b6ca904dabe97", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229116, "uuid": "b8026e0c-3870-4f87-aeb3-1b28f9ca6346", "value": "T17D830881F8C741F5C917483460ABF23FCA32D57A81719B7DEF99AF26DA3760291132", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229116, "uuid": "ef892590-2f26-4ea5-8465-c0376dd78c83", "value": "1536:QLzLyi7HkIhDMKM9NNMQp/rSTyWCz7BYqCTRBzU2Okt:QvrHvhDM1NOQp+yn7BVCFBw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771229116, "uuid": "1cc277ac-74cc-4a93-8301-d670457eebb0", "value": 83728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229116, "uuid": "b4fe66e3-4f4f-446a-8c1f-47977c1f31b0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a8d46d9-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771229116, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "12ad6a75-ca68-4648-822b-de2caab0f022", "comment": "Malware payload (Mirai)", "value": "840a3bba4e0f3280321feb4c54fd3e95", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "ed3eba26-2105-4269-baaa-447077dc0ec2", "comment": "Malware payload (Mirai)", "value": "0f45c42471fa0eb964d19ac63cad76bfc7920e6b56510296b983a291b309419a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229116, "uuid": "c64ba466-b723-4dd2-941b-5f81c884671b", "value": "T16C832824A8792E57C0D4917A12F78721F1F6330E15B4CA6D7D760F8EFB54A80A91B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229116, "uuid": "dd63d6fc-7b8d-423e-8c7d-84bc1dd609ca", "value": "1536:2Kay5/POr5xpnTgaeL174tugqpV75Q8Tp1JLM6:pbFwLABuu3V75Q8DJv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771229116, "uuid": "ca2ca46f-60ed-48a9-bd01-47d02b2f2eaa", "value": 86744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229116, "uuid": "0fce5ac2-696e-4990-9376-c0067c618296", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ab4f14b-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771229116, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "e236436a-4be8-4134-b2fe-6bc5ebc8c815", "comment": "Malware payload (Mirai)", "value": "1207dee19552465f62fc19567387bba1", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "3dd32ad3-d0d6-43b4-891d-7b49cb96aade", "comment": "Malware payload (Mirai)", "value": "5492a398e2b2ca559193dbadd21c264bb0052162213ae69cc7d4ab2136a6f18f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229116, "uuid": "f9c8e899-b780-4d09-88e2-260fdbe986c7", "value": "T197932982BC409A11C6C50777FA2F118E331267ADE2EEB252CD141F647BCB91B0E7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229116, "uuid": "2447190e-3f2e-4cbe-b7ec-5f1f733cbd44", "value": "1536:+SnU1pvZIptjleJ3/+GpNMu51HrTxv9VCJ70qJdVBI04KzQII5izpOlmQhj:01vI/jl2v+GpNnvB6YqJXBXpOlmQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771229116, "uuid": "4c75ea91-c226-4aa3-afe1-f1b61664f792", "value": 92812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229116, "uuid": "b6c93c18-da2f-488f-97df-b73e04b3092e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3adcb675-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771229117, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229117, "uuid": "c99033bd-0f29-45be-a51e-fdf9ddb66507", "comment": "Malware payload (Mirai)", "value": "fb9845313c7de213d3c8f47c7dc9c6dd", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229117, "uuid": "9c9770eb-942e-40b8-b997-22a8e825d487", "comment": "Malware payload (Mirai)", "value": "bf663d0a11eaf9ba7c676d2de4724eabc26c6ea47ee389935412deaed20f26ea", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229117, "uuid": "66efaa25-c785-486a-9306-a537879edf4a", "value": "T13C24741A3E12DF7FF55D867047B38A30969836D62AE1D585F26CD70C1E2028E641FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229117, "uuid": "547cb93e-ee38-4fac-9a19-a339eca7f04e", "value": "3072:c24lFJPZJwO4PvylFQFWo8NWdz0OMiKE1HjWGrCXYWvcJG:c24lFJPZnSvylF+WKz8iLNRrCoWvR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771229117, "uuid": "bce6c8bd-2109-42c1-a527-941a1a186764", "value": 216036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229117, "uuid": "7d4b6213-71e3-4c94-b332-57d08bff8345", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3af789f2-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771229117, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229117, "uuid": "4ac49d9c-1a91-4a15-9d01-2ec030db946e", "comment": "Malware payload (Mirai)", "value": "9efdce2ff67cfb0d79cae3bf3d34bab0", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229117, "uuid": "17d85558-e387-4b98-a55e-f1896d16cf56", "comment": "Malware payload (Mirai)", "value": "e0789fbf64509e8fef9b8eb251d11c7076672855f56710ac2266bcd738542df0", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229117, "uuid": "e86ba0fe-4ced-481f-b7d9-79b6234fd002", "value": "T118734B96B4119EBCFD8B95F981220F0EF42163055B930F27B66BFEA37C620A49D07D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229117, "uuid": "c26c1154-9920-4263-81da-db156a2d5b34", "value": "1536:2jv2hZem+8XOpI+zlX972dpOqGMk0rWk53tlpJi8FyQfl:ym+bpI+z997YplNa+lD1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771229117, "uuid": "735f4ab2-c20d-46e8-8719-e528a8c257b0", "value": 78288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229117, "uuid": "a43a70a4-3f74-4225-94f5-c4eb5f1c25ee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c3b642b-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771229119, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229119, "uuid": "bf858c56-6915-4cc8-b31c-60e2ecfb1b96", "comment": "Malware payload (Mirai)", "value": "f52bf8f96da1c52ed352a199646c018f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229119, "uuid": "a09ed514-2eff-4ab2-9320-482c9949f6d6", "comment": "Malware payload (Mirai)", "value": "0086b623fe36ab4a7b6ef1f8a3bd7d6a88a99a24169ffc1037d8b3399ee05d85", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229119, "uuid": "324d4529-9e51-4ea8-92c4-6c69882f58f3", "value": "T106D32B81BA43CAF7D40304F001BB663E8F31FC2A4837D595EB69BEA5DA135C1A6163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229119, "uuid": "460e1553-6c51-4f95-9a84-412a7c23dd74", "value": "1536:XQizGOKZMEuw1ZaUkoIJ3nRi7xUX0GrWVR3WNy4PJ+GpPCI:X9zGOKZMpw1nDIJX47xUX00ICUGb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771229119, "uuid": "d2e0998a-328c-4434-9499-26abbdf4fd1c", "value": 132584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229119, "uuid": "32022988-ca87-405f-a634-416787990ebe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c3bc526-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771229119, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229119, "uuid": "fb08f33f-092a-404e-9f36-ee6f8663054f", "comment": "Malware payload (Mirai)", "value": "62be5c925f7247edaf715cb77ea1bd70", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229119, "uuid": "326f521a-2756-4e2f-9894-e182b82d4239", "comment": "Malware payload (Mirai)", "value": "1d8dd92aed0207d8191cd467a71530827e68d8e4523bbc151636ac9f50d8566a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229119, "uuid": "d0aafb0c-8b9f-4a38-b267-781e4deba17b", "value": "T1DE735CC8A5C3E9F2EC040E783177EB719D37E53B6139DE9BE7E96523AC4160291022", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229119, "uuid": "ef89edc1-470e-479e-9b86-9135f3f29f7e", "value": "1536:rSHiADL/5OY5Kh3DQ8hnxWD4qMFOZtJPkJf18Hb0LWFWACHbDUV7yb/oUkt:GHiGL/s9ZQinxC4qMFOZtJPufCHbE88j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771229119, "uuid": "35a823e8-00a1-487c-b9a9-4a1820381afe", "value": 74512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229119, "uuid": "f5b134cb-a55c-402f-8a17-3032362b2467", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c676ce7-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771229119, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229119, "uuid": "dd8c4259-f7c5-428a-9430-97c0a9bc0ed5", "comment": "Malware payload (Mirai)", "value": "8dafdc64547a8d81ed86d590faf99950", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229119, "uuid": "21ee15b3-dacb-4418-98d8-92ea692a7ca6", "comment": "Malware payload (Mirai)", "value": "07b9b06bf10bfbd105c955d159090b708e7e1a156c615de27fb06761034bc02c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229119, "uuid": "bd45dd93-5735-47b1-ba5d-bc5b5c1489d0", "value": "T19BE35C86EA408A13C4C61777FAAF414D33229759E3EB73068D185FB43FC6A5E0E276", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229119, "uuid": "8868288d-383d-4c9b-be50-a33e1246362b", "value": "3072:r5Bu/iHVi69d5EC3yfOYqJOWJ5f8SfIUYlMoGfk79M/9At8l:1VViS5ECCGP5f8SfIBlufkxM/9At8l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771229119, "uuid": "282bfee8-d94a-4a80-88cc-925039beb11d", "value": 157087, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229119, "uuid": "d139ba09-8e2e-47ad-bc20-12bc0021039b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c90320c-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771229119, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229119, "uuid": "0eefb531-5f17-4d07-a17d-bd291c862363", "comment": "Malware payload (Mirai)", "value": "a00c5636df2cb6e74a922370ae05893f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229119, "uuid": "025a7f34-7845-487c-a8b7-27fb9c63a31c", "comment": "Malware payload (Mirai)", "value": "c2b548e96d92872e073db11c2098e3b369d261aa23225e4eb4316423e90442b7", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229119, "uuid": "93c0a325-24be-41d1-8462-378f732f5127", "value": "T120F31A87F900CEBBF40BF37644A308257530FFA658A25A37725778ABAD391D41427E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229119, "uuid": "20aca23d-7cc7-4e52-b125-4618238e076b", "value": "3072:wUKZ5Pdzi4+iNsQ7+Dc0F4JE4aVfjbiUL/r+mfV1BBGovXyCubPL:EjPdzi4J7+Dc9E4yL/Smf7LyCyPL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771229119, "uuid": "5038768b-623a-4097-857f-a5e95254eb97", "value": 164524, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229119, "uuid": "df5fc3f3-3e81-46da-93e9-5b0b81f6b809", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9205e9e-d022-11ee-bc29-82aee05be84a", "comment": "Malware payload", "timestamp": 1771229120, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229120, "uuid": "697267f5-b2ef-44e6-9f26-73a453bec4dc", "comment": "Malware payload", "value": "c659bfa6323d8283958d86d882afffde", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "linux", "colour": "#fe4864", "exportable": true, "hide_tag": false }, { "name": "malxmr", "colour": "#8679cb", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229120, "uuid": "41537515-cbea-4a14-a094-e9e4baecf6f0", "comment": "Malware payload", "value": "55faf81bdde1155dce131dac7ce239480d70efb5855a226f50470d570065ed78", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "linux", "colour": "#fe4864", "exportable": true, "hide_tag": false }, { "name": "malxmr", "colour": "#8679cb", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229120, "uuid": "082e5622-c931-438a-bfba-3e8ed8d36cc7", "value": "T1FC6633BDC729B8055B2D7CD01083E097154FEF946956D90E0B6607B293F6A8FAB2EC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229120, "uuid": "4cbec70b-08e8-471a-95a4-494321eba3d8", "value": "196608:TJ2KB0kYy/boGx/F5bKZQNagSzshcRV+OgEkFz:TJ2BtyF/NVpcRNgB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771229120, "uuid": "a82c7ccb-c933-48d7-8cd2-b1f8b16f212c", "value": 6520412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229120, "uuid": "33f9e61b-2254-4405-a90c-e984b2ab54f6", "value": "application/gzip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40e58322-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771229127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229127, "uuid": "dbba5bf6-4f5b-4828-a9de-8b91bb0b4dc5", "comment": "Malware payload (ConnectWise)", "value": "77456e37cb3c0764ee635e2167282358", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229127, "uuid": "e2d7f5a9-1ca9-4255-b199-5a380ab91234", "comment": "Malware payload (ConnectWise)", "value": "f7f60297c829073dc411d02d34c5eb89329a12ec90c2b13819071a9ba596f5e0", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229127, "uuid": "38878862-4124-4c49-90f6-4997d98720b3", "value": "T1FCD6232523FD441AF8F74B79FD3682A45D72BE64CF21C11E9228B90D2A74D8096727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229127, "uuid": "f1e7098b-fda3-42fc-954d-6aafd9acee57", "value": "196608:wWh0cGwPWh0cGrWh0cGSWh0cGYWh0cGMWh0cGyWh0cGO:wWac5WaciWacZWacPWac1WacpWacb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771229127, "uuid": "ab437d03-769b-47da-a908-d8f780742d05", "value": 13471744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229127, "uuid": "f0a9e2f2-a3a0-488d-88a8-6c3e8bc0b44a", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "41f22e1c-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771229128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229128, "uuid": "321a8f6e-071b-47d1-ba71-db0599cdc40f", "comment": "Malware payload", "value": "7ca90107f85c4ca989d09b5497b93f20", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229128, "uuid": "6c067268-d3aa-4b29-aa1d-c03a60247913", "comment": "Malware payload", "value": "ee73ebf31c1cf6dc922f73e3671e136692030165cec29bc1df18cc717700fc69", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229128, "uuid": "4e191fce-6474-4f1f-8a8d-962d47bd8a11", "value": "T1D97733619BF115B2F4B7A9B5CD998662CB7DB8800770E5E702215DBA0E537900E3EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229128, "uuid": "e83c4df1-b5bd-4d3f-8e41-1084b10fd8e6", "value": "7c75a83e117d2bdfb2814c53e840c172", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229128, "uuid": "b2595f00-ce86-4f99-80fb-f4288803a5b4", "value": "786432:19kZDpmWWqhhyKo6LlvV+A7ucO9Oq0z+gxjpltN:6DpmnquKvM0cAqZgxn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771229128, "uuid": "a3460fb2-9e61-4611-b2b6-d8a3fd7ef716", "value": 33600453, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229128, "uuid": "27822ed9-9001-41e5-961d-73a0c0a15569", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0dd0459d-0b0f-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771229470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229470, "uuid": "708891bf-2a0f-4cab-b12b-a96bc779be0a", "comment": "Malware payload", "value": "d3215f9366d703663cb1375ce7059261", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229470, "uuid": "022cdc26-e7fe-4ff5-ab6d-43552e2a981e", "comment": "Malware payload", "value": "c17844637e23cedfa3500051be67dde8efd4f82cc3cce4116115d786a3bcb8f4", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229470, "uuid": "43bf1445-9ec0-4f65-b1ce-082a12381446", "value": "T15FE02B5420673596BE531E10762BBBD135806C45EA10183EE3B9BF234CBCF017B0E9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229470, "uuid": "fdfc4e00-6950-4cc0-a12c-13e5fe98aa34", "value": "6:hd2Pr0OXOZYzBqlQXZRlzTjafaqUZtL57bNwb:X2jOZYzYlE/jaC3THGb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771229470, "uuid": "825edf54-ce7e-4a3a-864f-ea4f9563ff79", "value": 328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229470, "uuid": "0e40ad12-12c6-454a-a68e-e858ea1c6887", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5438e377-0b11-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771230448, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771230448, "uuid": "b07bd634-726b-44ee-b5a7-58a415df6cbc", "comment": "Malware payload", "value": "1fb6de58d383975ab50c499f2fcbf47b", "object_relation": "md5", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "password: 2026", "colour": "#a65f14", "exportable": true, "hide_tag": false }, { "name": "pw-2026", "colour": "#4d3d79", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771230448, "uuid": "e3940095-c2d3-4a3f-b028-2c539a0b5d2f", "comment": "Malware payload", "value": "6851d29abb986651afc9d21c92cf28e5a0c321943fd9c3d5d51d9eddd74a2f63", "object_relation": "sha256", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "password: 2026", "colour": "#a65f14", "exportable": true, "hide_tag": false }, { "name": "pw-2026", "colour": "#4d3d79", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771230448, "uuid": "ee5d009d-104c-42a6-8388-e333646a0f85", "value": "T12C363391A0644133C43AE73D9F55132EE943260EAC5E25B3AEBDC6831CD938C57FE6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771230448, "uuid": "f8d785a8-71f0-4b3f-bb0a-be7f9586f1a3", "value": "98304:ow5IeVBmCawNJISKv/UTubxtJSz3UHy4MgR77g2mbSREpmi:ow577+UTqtoEHyfK7almi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771230448, "uuid": "343d10f7-0860-4a41-b4ea-633f42c6ce33", "value": 5270817, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771230448, "uuid": "dbb51e37-63f3-49b9-a9a9-4f28098c193d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a7488d1-0b12-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771230753, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771230753, "uuid": "44e27aa3-201d-46d8-bb0f-c41473cea9cc", "comment": "Malware payload (Mirai)", "value": "09381e843a8102f04bef2c8677e39f3b", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771230753, "uuid": "d22fad8c-d9f1-4336-96a3-551ceac2e061", "comment": "Malware payload (Mirai)", "value": "6f32d93e26258f0c74946bb266fee79ab0e492126996d29300d78c1c1dc85c1e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771230753, "uuid": "f9c7ec65-71e9-401b-8196-39291b47a724", "value": "T1D754A4797B21BF2FD7B892310AF62FB0D31550C236A1D251E27CDA14AEB124C5C9E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771230753, "uuid": "77038425-5b8f-4db0-aa2b-ae35b1165e80", "value": "3072:ZJOW9wRy4LadBiJc1UwJWbuv7cNMTGl3R+j2ZKPWAMgB6C+nIfGM2pAn0R:kLZZTeh+nRlR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771230753, "uuid": "f80bdd67-90c1-4cd4-b610-0ef4d1d1a3bd", "value": 288913, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771230753, "uuid": "ec88f92c-5aa0-4c1d-a838-4a533ca8b685", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4823cdbf-0b13-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771231286, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771231286, "uuid": "ba04e5a5-ed72-4f79-8ec5-d1ddcae59be1", "comment": "Malware payload (Mirai)", "value": "d395ef67eef60ddc7a5a406190c1afd5", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771231286, "uuid": "79167160-a86f-4cdd-b1ff-2f0eaa09e50b", "comment": "Malware payload (Mirai)", "value": "c0a28e71f506879f4ed02e436f078d6046b9e06b39b6a3659fd8e423069528c6", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771231286, "uuid": "203bc113-b42f-4fb5-b7d5-fafe3358cad8", "value": "T1B7246D8B59A55EFBD20CBBB16C7A1F340719F1611B0F04A7283CD674621F6CAB09FA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771231286, "uuid": "a536912b-aa04-4e75-80b5-8b01a493d039", "value": "3072:7MdE54C3oC5cBvsS9jXK3geLY/0TRH0V9pLe5/ycOCQDFQ:7SC3oC6vP9u3/8/0TRH05yZ7O5BQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771231286, "uuid": "32ee1f1d-c195-4c3d-89f8-9dbd2f3aea4b", "value": 224133, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771231286, "uuid": "bf8e6a40-1700-4aa7-a5f2-647b406bb59f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b47837e9-fdf0-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1771231568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771231568, "uuid": "ea9e1552-2ec9-4e9e-9d10-e1fb2eb41dcf", "comment": "Malware payload", "value": "b7eb5eb0e8cfec4965e7f9f1bd30a2f2", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771231568, "uuid": "17d7b82a-a8bc-4d38-b896-61caabe1518a", "comment": "Malware payload", "value": "eb0ecbda77b9ce6b978c3201374aea209be594a3c9cad9a499fbb1bbba730125", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771231568, "uuid": "fb2ec93b-58cb-4661-b568-571aecc56356", "value": "T13193DF7461CB86D0E01FCD9076A8FAB1217335E3E6DA0EA10338F6548EC9E69395D4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771231568, "uuid": "0570fe42-ebcc-4e21-98d2-4de49917706e", "value": "1536:D/IHstH34DES1/nPuRO7tr02dS9myWRR0u398LX4haTMvlzGhZ:yDNn2RD2dSi0ufhJC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771231568, "uuid": "5709f7fe-6178-4863-9944-296dfaadef7d", "value": 97280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771231568, "uuid": "b9c9b542-e5ad-41c1-bce8-a6d861df9a4f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b3e9cf6-0093-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1771231573, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771231573, "uuid": "ff7c4761-23ac-40ba-a6fc-da8a65b0c68b", "comment": "Malware payload", "value": "f86cd334b472efa31ca2e8f4d4312bf0", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771231573, "uuid": "9be6e0f6-827e-46dd-a874-6aff73f158bb", "comment": "Malware payload", "value": "3e52a916bba64107d275ecb6f8004aa0d87f4533570943e7c687be75688ba824", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771231573, "uuid": "a20570bd-eaf1-47ce-b342-40482da1c68f", "value": "T1F525F9F141A681D0D6111A4069643FF0117EB827FDDF28B513672B8DDB9F894288EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771231573, "uuid": "d112ace5-81c5-49f2-839f-3fc3d6d13140", "value": "12288:ynzD9CcG+f2GnF46Hui/Sc9SOj7nPbkf7lAbLOzJ4M9XAevw+nC1pvoF46Huu/S7:yzD9CcG+f2Gwknf1ElVZlWBN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771231573, "uuid": "3ac08d7d-52bb-44cf-867c-824c389b27bb", "value": 1014784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771231573, "uuid": "cf7a833b-d849-4d2f-8a6c-92dc1dcc135a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37326747-0b14-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771231687, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771231687, "uuid": "fd48cc6a-dccf-43c2-bc78-aa199713e14e", "comment": "Malware payload", "value": "5dc5ab37cdc1dc5382d7297ac7769e75", "object_relation": "md5", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771231687, "uuid": "a4ac49ea-14c5-4d19-a529-f7d38e7fdbea", "comment": "Malware payload", "value": "1739d5cd6f26a6dabaf6a4665be27ee55b4e399e93e9b2faf2bcafd86800e5f9", "object_relation": "sha256", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771231687, "uuid": "15e6db84-880c-4f3d-b5c2-5209e26dd277", "value": "T128E4B0BA5355AC9F4E1C0E65F408074B1D2C48D7E2B8D2F87A82B4F896A51A44EFCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771231687, "uuid": "dbff1177-b203-428c-a2b8-4352f5ea281a", "value": "12288:7rd0KtLQw+MyzGH6bhDLiz9I7Wbap0oNArZZK2xn8eGbSHO4iTdQfOCbb9:7+KHQzM6b9OztOp0oaO2R8eGbr4iTyfX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771231687, "uuid": "fbad9366-8864-40fc-943c-01ca23a9ba66", "value": 704515, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771231687, "uuid": "7d246b37-8bc3-441d-bd0e-ac4e2fd9e82c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a5285a3-0b14-11f1-8369-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1771231746, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771231746, "uuid": "bbb6d4fa-63a0-4932-ae96-1a6e03d89112", "comment": "Malware payload (RemcosRAT)", "value": "965f8d2fd7126df1cf9f5e3a33730b53", "object_relation": "md5", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771231746, "uuid": "d2e375d5-5039-4847-88bf-dd6cdc111a74", "comment": "Malware payload (RemcosRAT)", "value": "1c2a0c68a471d8c04321cb5d4f463fd02f8fea18a9546d019a0c75669054bc62", "object_relation": "sha256", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771231746, "uuid": "df1bb2f8-ed74-413d-8e05-931a651c1a63", "value": "T14DB37C2EE70F0955DF95967B434A4A4A09FCB33DB38500B139AC973437ADC2E4A629", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771231746, "uuid": "452fe2c4-1cdd-475c-bdd6-f8770bf85408", "value": "3072:Pc08MzV3KCM6pLPCOpX8STl8CpaCyqVd/sQ:PoMUCM6pLrX8SqGaCyO5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771231746, "uuid": "9364c83e-c12d-44b4-b37e-3793869c6f0c", "value": 118113, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771231746, "uuid": "4dc6031a-9021-4df5-8bfd-90d7e063c4d2", "value": "text/rtf", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0b6eac3-0b17-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771233180, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771233180, "uuid": "7e9ea7ba-8197-48f1-9fe8-314d98987aef", "comment": "Malware payload (Mirai)", "value": "a7edce059e27a6f460a2bb2e625400c7", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771233180, "uuid": "257b0e7d-2bf0-4fb2-a01c-d35044d86acf", "comment": "Malware payload (Mirai)", "value": "011b013cde23fe0e24629d4030d95c6880032eb7e16cb6640d4dd1b377f87a50", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771233180, "uuid": "9d206036-1de9-430c-abfc-bba5246d4aed", "value": "T180542946FAD8A72BC3D223BAFA7A0B6F33358648679672155D3016743FC27587B360", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771233180, "uuid": "67121bc9-6710-4da4-838b-f9f3323acd39", "value": "6144:PFDDVzBhZaTJ7FbDq9JUMVEshK9yhywu+uj:PF5vZa19SiI2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771233180, "uuid": "be79beb1-ceee-49bf-b1db-51c6606dceec", "value": 281193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771233180, "uuid": "2e456780-37be-4d2b-ab9e-ce8c8b6ac080", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f7fcc2a-c7ba-11f0-85ba-82aee05be84a", "comment": "Malware payload", "timestamp": 1771236127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771236127, "uuid": "23fec6a3-9a46-4f48-a39d-82ccf6e2bbfa", "comment": "Malware payload", "value": "fd4bed46513c9879e695619cfe851a79", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771236127, "uuid": "7e8e0a62-656e-4de5-8f8b-af120b53d52e", "comment": "Malware payload", "value": "c38961f4493641448c71aabe8b46796c4ef0c6aaaed187be02ff06ed152ae1e9", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771236127, "uuid": "9c6c0bc8-ba64-466c-80ed-96c22d296fc7", "value": "T12F56F1C7F7D8A92FC8775072897E52B151878C028A839F836D18760C69BB5D42F5AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771236127, "uuid": "4eed61d2-2c14-433d-b13d-cba891f53a02", "value": "98304:qkEoTwrYhK8Yofsros5OrsbxYfc0D1BWoz5qPvrEZC0vPqmYZnXrfLR/mpCltR:PK8HfyaIbaciAFvrEZpXqmY9XrF/mpCd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771236127, "uuid": "f92b2d14-c59d-422d-992c-6723052d6a82", "value": 5908430, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771236127, "uuid": "0863758b-0a2f-41c5-bc94-d1f44e66a790", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97e97e05-0b1e-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771236145, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771236145, "uuid": "54c924f9-c206-42fb-a155-3cf5d34b9752", "comment": "Malware payload", "value": "095a009d86ea5580f3b9f829b8b0db48", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771236145, "uuid": "27a2aa11-1b88-4b18-ba0f-740ffb33daa5", "comment": "Malware payload", "value": "f90f4a90218ea63983fc1395362604236d159e2c3d49683e033a3bd272ad9b18", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771236145, "uuid": "9a1b5a73-cc67-4cfa-a0c7-1444b508cea4", "value": "T16787337BA2606F8AF0F687B40CE1C45313317D6C6F62478E438F53546A327286F6DA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771236145, "uuid": "d0717995-2dc6-4a11-82c5-63e8a34c91e9", "value": "58a01dcb342d5b69678b6a4c275d6c60", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771236145, "uuid": "2ced80cc-a57a-4af7-8f63-8a1840ebab28", "value": "786432:aa8ySBIhWXO93vhFw208gwgHSxz1hc2UOlyxTLAjf:aa8xJO9508gwgHKPcVOliAT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771236145, "uuid": "60eeaab2-8cdd-4f96-b44c-b6eb3b88ad9e", "value": 37964212, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771236145, "uuid": "9e93dbb5-fa9f-4f3a-b5ba-09c93ebab8c9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b239336-0b24-11f1-8369-82aee05be84a", "comment": "Malware payload (SantaStealer)", "timestamp": 1771238646, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771238646, "uuid": "affd7917-cb64-4249-8198-6ec4238ac9e2", "comment": "Malware payload (SantaStealer)", "value": "20464688eecb4ecb2222cbbe48218d3b", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771238646, "uuid": "d7e530b8-af50-4ae7-a6a7-bfd21a00b328", "comment": "Malware payload (SantaStealer)", "value": "865882a0c9d61a465e26e53ef51124ba527ad581bebb41b0e43f6b855df94e9d", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771238646, "uuid": "ce9b4163-9ba7-41c4-b18a-b3ae773a8b1a", "value": "T18D1633F83351BC69EA2AC5FC525843670B36A348A5C9AFB517FADC225F53361CCC10", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771238646, "uuid": "4c72bba4-55ac-4808-8b12-5cda21a3ce57", "value": "459038dd913bd7fa2746dd2acf101131", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771238646, "uuid": "011d3466-dae9-4c3c-8d67-87f3a6f04a16", "value": "98304:q+0vMWofV2qkm/2/ebaQCSgwzO8v9AtiaI5tLT+ydwW7jTum:q+0vKtB1JE8vvHtLT+6vT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771238646, "uuid": "7966e81f-840d-4f7f-b8f3-47a121214c65", "value": 4117504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771238646, "uuid": "86d2660c-304a-44dd-a32b-7eac23b12128", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9971662-0b26-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771239610, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771239610, "uuid": "14bc1a60-0ba4-421a-bd1e-d78a2dfb01b3", "comment": "Malware payload", "value": "875c5024811c3e4d7d5e2642e57fe98e", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771239610, "uuid": "41e43efe-ccce-438a-bdca-85b1dafe3af0", "comment": "Malware payload", "value": "fd9a4f6f1e50cabae468c05fc670284c85044b6abd8cdf1e19717b7cb3b6e903", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771239610, "uuid": "3e42fdd6-5da1-4b14-9e1a-1405c992dba1", "value": "T11D954B49BFB4A1B1D0A9D232EC7581E1A235BC480731BBC32F04BA761D762D15E763", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771239610, "uuid": "174444c3-d20e-4f8b-ada7-040605c1235a", "value": "9cbefe68f395e67356e2a5d8d1b285c0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771239610, "uuid": "dc9b4b51-f1b7-4ec7-899c-a4c292e84210", "value": "49152:qeeNftStZpSz/qr/lFLQvkjB1yTwqBU7b2b84o1gLmJf:UtStZpSz/qr/lZ1RXJf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771239610, "uuid": "394e0a7c-e0b1-4c87-8bea-14d5458a47e4", "value": 1980928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771239610, "uuid": "cc781926-b924-44cb-a01f-314fdb1aa15f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9992ba71-0b27-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771240013, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771240013, "uuid": "28e1971d-e4bf-4034-b4c1-4da2a0f5ef31", "comment": "Malware payload (Mirai)", "value": "175d09d9e54deb1913a936d9dc38ed02", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771240013, "uuid": "f32b4987-f5cf-450e-896c-3d8bec42ea31", "comment": "Malware payload (Mirai)", "value": "7d992792b5ed39e61eecfa1860baa276540f3193031b7a8f2f0c5a62c8a1214e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771240013, "uuid": "8daeb1f2-d847-46b1-81b0-c2412059e58c", "value": "T1013319B51516F2BCE9E22078F40720F529530A1C3ADCE2D3B0930579FFB5B48B96AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771240013, "uuid": "7de35379-e08d-4695-83b1-3e6c714cdba9", "value": "768:zMClhMqB0yBuKw3GoACzQyZRtlkABYxQhTUnRaww31:zF0vZ2oR9DtlksYi0fs1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771240013, "uuid": "b2576de9-f9ee-4980-84ea-c9f95717d37a", "value": 50632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771240013, "uuid": "3cf6aea5-09ff-423c-89fc-176ac97dbf5e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9bda03d6-0b28-11f1-8369-82aee05be84a", "comment": "Malware payload (Fuery)", "timestamp": 1771240446, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771240446, "uuid": "1bc252cf-a621-45c5-b769-e9d73a3ea78e", "comment": "Malware payload (Fuery)", "value": "9046020c727c31a3fd75c6074d1a7733", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Fuery", "colour": "#fb3e08", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771240446, "uuid": "4107f0e8-df67-4fc2-81bf-ba496a749f9d", "comment": "Malware payload (Fuery)", "value": "688c658457069ba67ff844cb28f409cf8988a15cc22be92b4ac4b62404fbf207", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Fuery", "colour": "#fb3e08", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771240446, "uuid": "fccd2f62-c0bf-406d-b2d1-11a498afb23e", "value": "T128250258276AEE03D4A70FF019B1E3B00BB85E999512D3438EFABDD7B43A7456D402", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771240446, "uuid": "759458cc-f735-4b75-bb36-2c782fdbdf04", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771240446, "uuid": "3baeddfc-6205-437b-86a6-0d2e6a42b6af", "value": "24576:2qu2VLSV1lZ0NhalCra4to3r4Y7uYVp9kh5d2:2eVLQe/SsNtMcY75VpIP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771240446, "uuid": "a5223d02-2323-4282-a3fb-e97c42c132ee", "value": 988160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771240446, "uuid": "5623c128-7c49-46de-a9dd-5d03894e2eb0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ee3975c-0b29-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771240800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771240800, "uuid": "018507bb-8266-485f-824d-3705126f50b5", "comment": "Malware payload (Mirai)", "value": "fcc02335b1499a7db699d159e0f422fc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771240800, "uuid": "7fadd787-d586-4796-b657-385972ea68be", "comment": "Malware payload (Mirai)", "value": "da30435ab61d02a3f377a0ec9a20d632a88da86ebb00e220a112a6caafe8a2dd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771240800, "uuid": "2ba7b33b-1dc8-4326-8203-d59056eed117", "value": "T122133A92B400AD7DF85EE73EC0930909F131A79551821A3763A3FD776C322A85D76E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771240800, "uuid": "e55e8ef0-1cb4-44a6-b1c6-b4869287ca2f", "value": "768:0xqFTD4t0MoBjFEWEw0Cmk+3od6WluD811JtTRHGtHwl5bsW71:COaWV+WLHVT6WkD811bRHGtwlXB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771240800, "uuid": "7022b324-850c-4dd6-99a8-55ba9bd34b58", "value": 45516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771240800, "uuid": "e28976f5-944a-4a79-855c-a3f78c8515e4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a71a0774-0b2e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771243042, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771243042, "uuid": "13341810-85ba-472a-9151-7572c497f75f", "comment": "Malware payload (Mirai)", "value": "eba54b8635ec2e25c296a33f9b6bcb37", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771243042, "uuid": "07c5b707-c982-45ce-8088-caf7cf453790", "comment": "Malware payload (Mirai)", "value": "5ff7c8fd287519eae837034b0276285406c30cb2c0fffd84ba4b668f55ebe0c9", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771243042, "uuid": "e19bdea1-906c-4856-91cf-657533b294cc", "value": "T111015E9A2096AFF3219ADF04FA6677DD601A6EFC30400FA4D05F3C9A6F58241B9057", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771243042, "uuid": "59e05a97-3f2f-4c42-b6d4-d1a9c51e23b5", "value": "12:bCj8dz0j8dzibGjZdzZljZdzZadJjRbdznjRbdzqjgHbdzyjgHbdz6hFGjUdzvgJ:b28dzY8dzibSZdzZxZdzZadt1dzj1dzH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771243042, "uuid": "d9a66ce3-dad5-4e2e-b7b0-a89f29165a04", "value": 694, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771243042, "uuid": "18e8d54d-8860-48c9-89b3-ed37529e9ea4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "040523a8-e5c0-11ee-b38b-82aee05be84a", "comment": "Malware payload", "timestamp": 1771243818, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771243818, "uuid": "33388691-bb4c-4ea2-846c-eb5be560646e", "comment": "Malware payload", "value": "724f25e7f93eae0ae54a80142e11b7ef", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771243818, "uuid": "396348d6-a213-4b94-b16d-6e8dade82235", "comment": "Malware payload", "value": "ab69ef32017a5365ee0e7faca03e1352382865c5672e989d99d2d77ec91c33ef", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771243818, "uuid": "ada0c63c-5576-40ea-957b-6ae1f3c929a0", "value": "T16D356D56F9808EA2C5D8177BB75DC35833534B78D7DEB102CD08672877AB94A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771243818, "uuid": "75ad9ff1-7b53-4085-ac21-96636653fd46", "value": "12288:00Bw2wHeeJgR3asIAksAi0uObzkzOgFr1qwRcFjV1D7a9KbsaKjpeFmz4T28bLv:00BnRED/TwOjX0a5xTdv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771243818, "uuid": "36b4a56d-942e-4473-8a6a-4e3981c5d476", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771243818, "uuid": "839fdafd-fd76-4cc9-92e3-587f77b3b3b5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771243818, "uuid": "c61fa8e6-e943-40bb-ade0-83b188ab7d7a", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1771243818, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771243818, "uuid": "0e8538f0-806c-4ab3-bc92-47f8e3e06b37", "comment": "Malware payload (Hajime)", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771243818, "uuid": "ead15d7b-45dd-480a-9ef1-70c58b3834f6", "comment": "Malware payload (Hajime)", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771243818, "uuid": "60907322-01df-4d7f-98f8-bc0707814fdd", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771243818, "uuid": "773b6b13-643d-4353-ad0f-71cac5e5fac1", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771243818, "uuid": "b06398eb-815b-426a-8a9f-4bd357e740e9", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3ea0263-1a77-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1771243818, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771243818, "uuid": "3af09c29-bb9c-4cd0-bf7f-fe1b2e056b82", "comment": "Malware payload", "value": "567d3249dbe60fa9478a424a69c2c535", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771243818, "uuid": "4d6999bd-0d7e-4d18-831b-20998db0501d", "comment": "Malware payload", "value": "ff70c53dd6e9806c588d8f78ee35d406db0879bf5419a18a87c7982c79e3e9bb", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771243818, "uuid": "5ceda32f-667b-45ba-bae7-8e36de3867d8", "value": "T19F05E184F5E01E67E487813F9B8246720266ED5FB34AC317574876BBB4BEA34EB153", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771243818, "uuid": "2bcf359a-bb3c-439b-a129-0ff9b36cfe85", "value": "12288:BZpdDbfRWxSYOkwVcqcMFT5G1z6EtYOyDIGOnd7w4bLvVc:BHlb/KwiqcMFUzYP8GU7PvVc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771243818, "uuid": "04acbad7-7cd9-4c9f-8d2c-50c2185ff40c", "value": 848048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771243818, "uuid": "e068745e-1a7e-4f39-8ae0-22685e01f430", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771243818, "uuid": "486c615a-f0b0-42a5-aa79-19cfdbe87bb4", "value": "t189217143a83f9f3ad5a2d8b0dc6a0725512b5702b4f9e7109f3ca9d06c7a016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cae4e4b-16ee-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1771243818, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771243818, "uuid": "5ef8a4d8-05d5-4825-a7f5-d5f05cfd945b", "comment": "Malware payload", "value": "936b35bfee8232f437bf6b46e88401dd", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771243818, "uuid": "1d045008-82e2-4809-95f4-405ed329089f", "comment": "Malware payload", "value": "de9a5647bdf02fa2b927566c78e54d5931e25c9f07d2ab884e135766815d53cf", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771243818, "uuid": "cb771f68-310b-4b88-8c27-32c462c46de2", "value": "T1B9356D56F9808EA2C5D8177BF75D835833134B78D7DEB102CD08672877AB95A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771243818, "uuid": "79caa983-8b21-4cf0-adf2-c474b41e9127", "value": "12288:E8dASOYRNCAJump208iJftl7zmnSrlcaUxQ5TVFQGl9eLtRajZa6ZTxIVD7bLv:E8dbbsO38+TfgRinIVvv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771243818, "uuid": "eba122a6-2709-43e2-aed3-5abf9a730b97", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771243818, "uuid": "49ffff7d-e985-4466-b956-9c2b6398ceb4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771243818, "uuid": "f0ee6ee7-7ff2-477c-8b21-65f3a4c2e8b0", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc649156-0b31-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771244420, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771244420, "uuid": "6ededa11-4457-4fa9-8c70-014986e47095", "comment": "Malware payload (Mirai)", "value": "211eb5e43ad513adf075e0c72fd20423", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771244420, "uuid": "abc19ae8-05db-4f30-98bb-105df418aba8", "comment": "Malware payload (Mirai)", "value": "4b7d3b3cb2b1399e9f86a5e84691c33d3a4f806a65eec0c2e113cce4a9324182", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771244420, "uuid": "f612ce82-08bd-428f-9ef6-268221036dd8", "value": "T141B34AC5FC928612C9C216B6FB7E618D332663F4D3DA32039D299F21338E59A1D7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771244420, "uuid": "7fdbf078-a113-4190-aa4e-9d49cd31910d", "value": "3072:2H4VpbRGQWdgZ9d97ntA8703O2t4pIzjln0Vq8lK9:2H4VpbRGQWdgZ9d97ntjI3tipI/l0VTQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771244420, "uuid": "b90f5a83-62d1-45b6-96bc-9f4a26c6f558", "value": 112104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771244420, "uuid": "59e50d74-614c-433b-b8a3-2b4f0dcd2ffe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5678a76-0b31-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771244462, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771244462, "uuid": "7553ba54-e967-4afb-b917-82cd4078198d", "comment": "Malware payload (Mirai)", "value": "dfb4af1f7284f47881973815b42a3d98", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771244462, "uuid": "b0b8861e-075f-41ff-890b-cb5d889e2893", "comment": "Malware payload (Mirai)", "value": "a60936c68f3e00253a0befa778d9517e15e8c8352f728c22b4a64378c6bca8a5", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771244462, "uuid": "6fc07506-5901-4980-8659-9297324e5620", "value": "T1EAC32BD5FC818611C5D616BEFA2D218E335317B8E3DE72229E189F21338A59F0D7BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771244462, "uuid": "dbdb3124-6dc0-4c58-bc14-521ae323e759", "value": "3072:UllXtslXUA4pNXfSvGcaUCYtFrLmiMrwKX:Ul9toXWb6v3a6TLmVwKX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771244462, "uuid": "244742e2-65c7-4e16-806c-236b8b62f05e", "value": 120284, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771244462, "uuid": "9c2cbef5-828e-46b1-8080-23b8da36641d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a2345265-0b34-11f1-8369-82aee05be84a", "comment": "Malware payload (PhantomStealer)", "timestamp": 1771245611, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771245611, "uuid": "b01b4abe-8bc7-496f-a10e-715ca2240092", "comment": "Malware payload (PhantomStealer)", "value": "7219337345dc4b4c98300e0c3d7dff1d", "object_relation": "md5", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771245611, "uuid": "3063b2eb-ab45-4d6d-829f-635087b6169e", "comment": "Malware payload (PhantomStealer)", "value": "258c1f9ced10998c67b8c2ef3e879364f247b56cf586dacd2e733173cc905619", "object_relation": "sha256", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771245611, "uuid": "efae3604-f7e2-4aff-a542-36ebda36bc67", "value": "T1640623A2DD5A1DA6875C622620BF6D0855E04B134C18B5893FCD61CF0F6FB8F90768", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771245611, "uuid": "43f81ec4-f057-4500-8b48-2d80dc2e1133", "value": "49152:p6HerbqG3I31olzUflgoAtEn52k+7B9ID+fgC36VIStBw:r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771245611, "uuid": "43bf149d-415a-40f9-b904-06f67a3dd40f", "value": 3661413, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771245611, "uuid": "54666ba8-1153-4e0b-8bfc-93a531626be2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b895176-0b35-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771245787, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771245787, "uuid": "e47358a2-fec4-4c28-8664-cf39efe607dc", "comment": "Malware payload", "value": "0350eeb93979e2d6f9a2ab70e347742a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771245787, "uuid": "ff89b77c-ec2a-4a9e-8b76-f48d739fa956", "comment": "Malware payload", "value": "6a1ce8cba8da5b19979fdb0b57800b6521bbf386c65dbab44c2b327c05db9e40", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771245787, "uuid": "fb9e64bf-8d6e-45bc-ba55-566d1d3e3d3a", "value": "T1AFB32A6BA7F230347117C719F5D6B72866AEC173EB020EE3BDB5662D86C229502736", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771245787, "uuid": "3932ae49-a652-4e0d-b3cc-4e74f5cb7ef1", "value": "768:0G5Zdyp3trT7lGRNjcXscJGcz74k/tHcBh7Sjv+aFfIerAP0B3y9GJs:08ypdrXl4kuh7Sjv+aJIerAPqSGJs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771245787, "uuid": "e6c98325-42d3-4302-b100-7eaf1b858d10", "value": 117402, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771245787, "uuid": "57b97330-02c4-4123-85fb-a9fc1ad51d7a", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6067936-0b36-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771246530, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771246530, "uuid": "11164726-b90c-4d5c-8101-d861709ac9f4", "comment": "Malware payload (Mirai)", "value": "a92c3c14fe7922766acf2b0c3385a6c8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771246530, "uuid": "a8b2dfe3-7f90-483b-aa5f-64c9bf4c4cd8", "comment": "Malware payload (Mirai)", "value": "849c5ccae6b9f0751e5d2700bf56e1427533c2b478df00dff5425f651548b13e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771246530, "uuid": "f34099a5-f1a3-49e2-a11d-1362b5604c7b", "value": "T1C71349C59A43C0F1EC1112F110779B519FB2A436AA79FB47E7A93A32FC02B1196173", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771246530, "uuid": "c77b569e-4748-444b-97b1-aba76f520a46", "value": "768:x73jOIDzzrq7WiEu+RiUjreAEx63a7x2Zq1z7yvEdTpKMxn:FjOAzwvEuP4aAEgwOkWItKKn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771246530, "uuid": "d71a6efd-320d-4820-b05a-ea9ca72cdd3c", "value": 41840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771246530, "uuid": "6b68f4f9-4155-4dba-b11d-0c7c93418004", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb25992b-0b36-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771246619, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771246619, "uuid": "e15ac6d8-d9fd-4623-b854-4ca8a5175db8", "comment": "Malware payload (Mirai)", "value": "c34724ed75b5b9401ac0c868e41189a0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771246619, "uuid": "f09a464c-a942-4be8-aacb-175a3bb0ef5e", "comment": "Malware payload (Mirai)", "value": "2305e1afc2f918fe5ac23fef5d2bf7e4eb129bd8789549b37025a291029133ee", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771246619, "uuid": "bf94275d-112d-4706-bf75-4fae8ec554e5", "value": "T157333A35B6752A1BC8D8987D22F74328B2F4168E28F8CB1F7D720E4EBF6085025176", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771246619, "uuid": "203d363c-c284-4d53-b09f-74ac3e390a53", "value": "768:vj72UF999I26p/d1DNwm+Bc4HpX2KlNhdtBBYNhju/QJwO+351TSOj:v3pF1IDp/nNwDBc4HpmKlzB+NIQJa3e8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771246619, "uuid": "599dcad7-0857-4183-afdb-8b0ca80a1977", "value": 50256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771246619, "uuid": "c734f82a-f1b2-4e59-a25f-9b237a8d1642", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94621dcc-0b37-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771246876, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771246876, "uuid": "01a526e2-a324-4d94-bb7b-129b4d6832d3", "comment": "Malware payload (Mirai)", "value": "125f32ca464a4eac7d1344ec399caf02", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771246876, "uuid": "f361c59d-b3f7-46a2-843a-f514aa5d8a2f", "comment": "Malware payload (Mirai)", "value": "b26645a5890d2b67a12d11b2559b0284f5e7c0e853c842269a80e1a5a7da159a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771246876, "uuid": "d8320c66-1310-42e2-a4a5-92bd171f5670", "value": "T1E2039E53C93A2D94C63985B4F8219B7E2B53E949A5936FD6D826C274C003F9CFC2D2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771246876, "uuid": "c401cb9d-8071-4dc7-8da4-3733891094bb", "value": "768:iTUc2eBs3+EuYG6TKjj53iGf/AES9AKblZ3ay3VJ5egoS6VnYUvC5YMy3:4D3BsOEw5JLSQS2rCje", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771246876, "uuid": "cd2ac3df-ae9b-48b1-ac94-539cdc1d3271", "value": 39908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771246876, "uuid": "f07bd705-e56e-4de0-bbe7-fbc335f9aaf1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d223f5ae-0b38-11f1-8369-82aee05be84a", "comment": "Malware payload (AgentTesla)", "timestamp": 1771247409, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247409, "uuid": "20f86daa-b037-4ec9-8a32-ef2d9740177e", "comment": "Malware payload (AgentTesla)", "value": "4a1233c2e1a8f202a072e14e389e62bb", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247409, "uuid": "404ba71c-5a4d-4830-acfd-9b20b811fc70", "comment": "Malware payload (AgentTesla)", "value": "7a87f14eb2f8f3e1417ef2e55cc7c225146d4b7736f3e58b25144530d0e92f65", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771247409, "uuid": "113bf381-1c2c-45b4-b8ef-31a813d99431", "value": "T153252374DE31ADA40B989525945E89082BA44F5B8C40BE953FDCA4CF0F2F74FA5390", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771247409, "uuid": "6be20080-292e-4b54-a6b0-3b3492635498", "value": "24576:aYjSdlg2WafAWNSQtTGt3IABRuOfkTNOUQH/7be6asM+Uk9c:h6f7NwnNsTEb/Fyr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771247409, "uuid": "08e761b5-137c-4f64-bfab-fd148a835268", "value": 1033125, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771247409, "uuid": "811f5e38-33f2-44c9-ba33-d483960c1d4e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04b2368e-0b39-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771247494, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247494, "uuid": "56bf8b6c-05bc-4290-baf7-1ae88cc0916d", "comment": "Malware payload", "value": "14a124d03b87b19a06ca3b0ddc306207", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247494, "uuid": "afe8b404-0178-447e-8798-d0074fbb920d", "comment": "Malware payload", "value": "c1a671241647c4305b5dc67732e7714a45c683b651c24149dd010a974bd476de", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771247494, "uuid": "258faa82-9207-4dc8-a0a6-16a1ec306002", "value": "T14D8308327589582A210B028FD263336C70FFD8E2D611E5B6F6F922344BA5EE135B76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771247494, "uuid": "ce596ec1-106f-40ee-bbc0-e8d36f166878", "value": "1536:XJyp/QdMqpYJKNoCtpxD3t2ZSDXpdyr2pbnOWajVN/:XEKltp9t2SX/yr2pbOWGVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771247494, "uuid": "11e4292c-0df4-4f67-b755-da7572d09f8a", "value": 85051, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771247494, "uuid": "f724b30a-a053-4d23-b336-3911cc04db0b", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "280a4e93-0b39-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771247553, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247553, "uuid": "2db6112d-1abd-4234-802b-c84cbda99dd3", "comment": "Malware payload (Mirai)", "value": "784f205af7199d205c23747d69743396", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247553, "uuid": "72030fdb-5c7b-482c-a228-2a043e0d4d83", "comment": "Malware payload (Mirai)", "value": "4e17aaa027bde62bcd7b23b24f5565205324cca981d1c769009e88a7b23792cd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771247553, "uuid": "529f5ca9-944d-4165-b438-dd84a93b6f17", "value": "T1AB134AC1A643C1F2EC5212F5147B67628F76E4364A7DFA92EBA92531FC03B10960B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771247553, "uuid": "b9b1582b-f74d-420e-a1a4-a70768ba4006", "value": "768:QQaiSup66OkEgy5oD5YQuj4J0UTeU4wQOntspVI/4bOGd7nX:QQaiSuptOkEX6D5YQ/J0UeUDttspDbOY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771247553, "uuid": "de81e0c6-afdb-48e5-8770-8ea44031175b", "value": 41840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771247553, "uuid": "0b418ef3-44bf-4e99-9d9c-8afb3849d80a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1bd3e50-0b3b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771248697, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771248697, "uuid": "770a7416-532b-4f14-954d-569aef1d16bd", "comment": "Malware payload (Mirai)", "value": "ec018f88a83811d992842427a1b239fe", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771248697, "uuid": "f4ceaa24-1951-40ae-93b4-5f9ea600e768", "comment": "Malware payload (Mirai)", "value": "8fd4f975d411174fc55438edc18df50a2f1cc3de48f6baab35d1d0108d17947b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771248697, "uuid": "2384670b-3057-4653-a6f3-f2a3a2c6bdb5", "value": "T1E5131742B3180547D5631EB0353F47E0E7ABAE8122E4F288760F9B4DC171E77A946E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771248697, "uuid": "1f9f2a7c-fda3-494f-b376-6141e72a204f", "value": "768:TuZQBal6xzFogyxBvDMTccDP1UqI9XFPTMhy6/janpyvsM73V+Otauo:T0UFogW5DMT3DyqWPwhy3nYx73V+uaD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771248697, "uuid": "dc95a8ec-1510-45b8-a0d3-cda5f1fae5ed", "value": 44168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771248697, "uuid": "7727ca0e-19e6-41a5-8e15-74236784c91a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5882ae7-0b3c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771249106, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771249106, "uuid": "037466d1-f0de-4128-a799-9f90624aebe7", "comment": "Malware payload (Mirai)", "value": "0ac296de2ef5545169ddb9ca501aac00", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771249106, "uuid": "f07f04ec-c239-466d-8af6-6b42eabbdb45", "comment": "Malware payload (Mirai)", "value": "b9d23eb589038e7f01f869f5379777675bc0b0fa17f597170144197a417ef982", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771249106, "uuid": "f94c1aef-a6c7-49bf-a487-6c5ac351cd4b", "value": "T1A053831AAF650FFBEC6BCD3745A91B49349C640A12E93B367934C818BA5B20F45E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771249106, "uuid": "127332f6-76e0-4213-9529-c3caef018e1c", "value": "1536:yGtQ8AKyjOz8lIrDXUAFAMSL3bKL2LZgsF8qD:yM6KyazQODU4L2LB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771249106, "uuid": "3f15efdf-9c84-4f01-9e25-18198e4fb4bc", "value": 64380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771249106, "uuid": "4ae6e3d0-ac3b-4575-a452-eb0aaa7ae0f7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "984fdd28-0b3d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771249460, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771249460, "uuid": "857bd1ba-0f44-4a32-b341-f46f22668664", "comment": "Malware payload (Mirai)", "value": "aa61824c6da4234f1ffaa68c7bae1a11", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771249460, "uuid": "d7c9315b-e00e-4e37-b742-6b42d0f01d46", "comment": "Malware payload (Mirai)", "value": "97c4e45aecfb6d8ef6b18f1a473f58b12542ae98864cbbdc3c65937de9508931", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771249460, "uuid": "3e91f7f0-7ed2-44dc-a1a2-7f243db1fff0", "value": "T14053941A2A258FADF76C873487B74E229799379727E1C644D15CEE001F7038E641FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771249460, "uuid": "3cfa1bf5-d837-4e18-bfb4-372b1a0eace9", "value": "1536:dMBsSfxc6HdeKImzB1M166Bc2ueZqf3J3J9:afbHdeKFB1teZEZZ9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771249460, "uuid": "97718818-878f-48e7-ac17-ed3f6b7174e6", "value": 63660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771249460, "uuid": "ff1817f0-fd76-4127-a23f-99b51b07300a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "258cf328-0b3e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771249697, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771249697, "uuid": "7a72a974-7b18-47f7-94ab-3cc97d0f9af6", "comment": "Malware payload (Mirai)", "value": "84fd5795e6caceb5ba0e62bdbb8a874a", "object_relation": "md5", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771249697, "uuid": "51a5a2de-5170-4940-8689-80b750c0cd59", "comment": "Malware payload (Mirai)", "value": "213698fdff7340cc0fc75a4bb7815f7428915db5e322204e708d8ee811f5053d", "object_relation": "sha256", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771249697, "uuid": "28beb890-feb8-43ed-97b7-9d43324c3f26", "value": "T10C2329035491C0FDC955C270AB3FA636C922F47E123AB59D73E0BE226E4AE311F5A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771249697, "uuid": "822f0b91-9f42-4202-b893-e0c5f204162f", "value": "768:FkrR8ysZAY+OGZZRw4xSwPtKOoGvHjKRDACGyjltp4B6gC:6d8y2+OOJycDckCGyp4B6gC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771249697, "uuid": "6bbaf6ef-e58c-420c-baf4-878d62e2af28", "value": 46400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771249697, "uuid": "cee80b05-9984-4144-aabd-c82579b06dd2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "438fe5c2-0842-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771250046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771250046, "uuid": "1e510514-e1b1-4a3d-8b6a-cd25a3107c0e", "comment": "Malware payload", "value": "4405ef94b5d7f86fda510ea82bb6d06a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "RTF", "colour": "#650e17", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771250046, "uuid": "fb55604f-512a-47ee-9f86-7df5726cb4d9", "comment": "Malware payload", "value": "c489aca5571eb078a4f49dca031cd30ede179b523d0b9e2d231544bb234b39ec", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "RTF", "colour": "#650e17", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771250046, "uuid": "b37961dd-623c-4a2f-a540-39e68db17bd7", "value": "T1C3A3A06EE70B09659F91A77B435B4E4909BCB22DF38540B179AC873437E9C3E46228", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771250046, "uuid": "8c806f02-b945-486a-a453-3f69b6f303ba", "value": "3072:YaLbKtQyzaXnOd0ZOk5/vL5G8sYjm/jmUoyQ9k0z:YGb+v0Mk5/vLA8sK1Uo5z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771250046, "uuid": "593ca82c-4712-40db-8d04-8b15276e21b0", "value": 100491, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771250046, "uuid": "f65fc76f-9cad-4ab6-94a1-7add2f402d29", "value": "text/rtf", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f751e243-0b3e-11f1-8369-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1771250049, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771250049, "uuid": "691aaaa6-0f75-4908-9e77-a727271ff062", "comment": "Malware payload (RemcosRAT)", "value": "e8c84467e448149c82050f3a469a21de", "object_relation": "md5", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771250049, "uuid": "9c084691-3cb7-4e8b-853c-b1b6343c0b73", "comment": "Malware payload (RemcosRAT)", "value": "106b52fa0bcaac202b565895010d83109071bb0bc2f4fe367ac0d89a3771636f", "object_relation": "sha256", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771250049, "uuid": "6ca219da-b3bd-416b-9d05-d1e34b6b1b82", "value": "T10E7607732203B8A27A7F1E6DD075A6805D1B3C13358DCA0CF5D93179B2D6E12EA7A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771250049, "uuid": "ff94c8b9-18af-4882-aa8f-1e89e7027e62", "value": "98304:jEJX25jpl5GLdx5Q3azz7yhdp8ZKieRdiTL/:jEV25jpl5Wdx5Q3azihdgKLuP/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771250049, "uuid": "8ba6d47e-2628-4921-8fbb-1036fb25dd7c", "value": 7643797, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771250049, "uuid": "8c9244af-5a98-4e11-baa7-988d18e11c75", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1d924c6-dfe8-11eb-bc10-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1771253167, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771253167, "uuid": "fd4c0671-9c5a-4000-87d6-e502ddf803c0", "comment": "Malware payload", "value": "6b0fb88c187a6dbf48017f66f262edab", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771253167, "uuid": "7b6d9bae-051f-4064-8f31-6864801d7e79", "comment": "Malware payload", "value": "ded36b111f815e57e2658bd881beaf247be1fea999902456df83840100f5ae65", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771253167, "uuid": "4600476f-7f67-4e13-9a28-5fdd994ed659", "value": "B9D3128BEF368C1FDB002E7216DB4B9E6C6D395B41CBF4A8F9C1818F13A11C57952215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771253167, "uuid": "9737ed9b-91bd-4f77-b999-ee3e0e232009", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioX:p3lOYoaja8xzx/0wsxzSi6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771253167, "uuid": "47beb727-45c8-4a40-ad88-b2c5f1712b69", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771253167, "uuid": "c56b8eb9-5a89-4340-9ab3-3ea3e4607353", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "002ca487-0b52-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771258224, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771258224, "uuid": "93ba64fd-6534-4f7e-a741-b586785f1449", "comment": "Malware payload (Mirai)", "value": "735e25d0f6eb92ab706727bdbb6b9099", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771258224, "uuid": "045ed771-51ae-458c-accb-397c7a276be6", "comment": "Malware payload (Mirai)", "value": "c44434244af42a2ac8f09f0abc4429b38833d83927e7ddb231bde215045a2d26", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771258224, "uuid": "fe0d06e5-ef26-42f1-a9d3-4719cce5d935", "value": "T156B3F616FB610FF7D86BCD3746A90B0529CC551A22E83B7A7974C42CB24B14F4AE39", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771258224, "uuid": "6dc71ec3-0744-4eb3-aa2b-b4d0e223f558", "value": "1536:pMAUIIqQHT/uaX+HA09bPH+imC1jdR3uJCq9uVXkBPZM05RDlaanzVGY:p5UIIDHzuP9bPe4fq9xhF8anzV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771258224, "uuid": "10c452f7-d041-46f5-bd99-1ec87f387358", "value": 110708, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771258224, "uuid": "c54b26d0-02f9-4f9a-bcce-ad380cb1df80", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d88e130-0b53-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771258810, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771258810, "uuid": "fe2b9172-0367-4027-ac00-47b8e6d48d1d", "comment": "Malware payload (Mirai)", "value": "8471aa19d87b9564e64c2006dc2d4268", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771258810, "uuid": "899a6f2e-4eff-4ab9-b955-e8daf2db41fa", "comment": "Malware payload (Mirai)", "value": "3550a7c238cbbd2645ecc2602f3a7736d85074dee5667aa0ef9c8bfb95f4e091", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771258810, "uuid": "7f909ef7-56e8-4f26-8653-987bcd295938", "value": "T100F2E6D1B8825A2BC2E423BABA6F518E336173A8D2CF7317D8151F107B8991F4D63B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771258810, "uuid": "88568730-7e8e-4a05-a7a8-ef0b724bd1ca", "value": "768:Zrk9VXt7tq56tW0G0xayo1xC3jA/AuYzrZw/M93:8X9to6do1eKuzrZd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771258810, "uuid": "daf1313e-c29d-41e5-8299-cbaffc87000d", "value": 37128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771258810, "uuid": "f3d9001b-25a8-4934-b359-5a6ab902c68f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84b3907d-0b53-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771258876, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771258876, "uuid": "52927b31-d715-4425-b6cc-3993de5e412c", "comment": "Malware payload (Mirai)", "value": "bb8e2aaa8537524abbf195de150214d0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771258876, "uuid": "4fcfd675-738b-418e-8aab-a947fde58439", "comment": "Malware payload (Mirai)", "value": "ad4c05bb8f5b9b48105d91c2ac92bfcd6ca9df960c758c220a57192037352702", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771258876, "uuid": "8af2dcd5-1da1-406e-a7b4-b6e119852b72", "value": "T167F2F1B06B056DB7C8E032727D2EC14AABF947FAA0D772D5331A4A8C65C05C2563A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771258876, "uuid": "7e5e479e-37f9-48bb-811c-c874f966ef6b", "value": "768:1s8gOvvs+q8vFFewtaevp6Ew+1P35jpx1/Py0SFR3UvFh:1s8gOvvTdXwevIEw+1PBpxN/Iab", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771258876, "uuid": "c5ca6f17-30f0-4e62-970b-1dd093d21ece", "value": 37348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771258876, "uuid": "198889fe-4437-4a4b-8f13-144408bcd09d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a84890b5-0b53-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771258935, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771258935, "uuid": "1d0f334a-6afe-4038-acec-c8f8421baddf", "comment": "Malware payload (Mirai)", "value": "04a9a7bd470f2d9bf43968c51ed8cad5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771258935, "uuid": "9bacc403-3329-4a3c-9ba8-1ab02d5086c1", "comment": "Malware payload (Mirai)", "value": "5336dc69ff02349ab5100891a9638c370d618426d8cce28f510d7144e6c434cb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771258935, "uuid": "d6974a75-a060-4165-8f1f-d44aaa5ed788", "value": "T1ED633A81BD815713C6D112BBFB6E418E772613A8E3EE32039D266F21378786B0E776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771258935, "uuid": "944c0c81-a4a1-419a-8095-b184f17f9607", "value": "1536:nv5bxamD209LfsLoXy/gd78IOPYqqDIxRepMLvzo:v5blDA/g1J0hk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771258935, "uuid": "ffb6aaf2-546c-4aed-b19c-2134c82ca7d4", "value": 73364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771258935, "uuid": "6353a25a-59b6-4cf3-ba77-43e201ab6f84", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6bac3cd-0b53-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771258986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771258986, "uuid": "ca9fd62b-2db3-41ac-a4d0-6246cc53b02b", "comment": "Malware payload (Mirai)", "value": "e38fdc9a1307d5093a6902ddaf18adc3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771258986, "uuid": "d4ed8f91-f005-468d-bd1c-902ed430a660", "comment": "Malware payload (Mirai)", "value": "8b976d0dc7e6b1360b0f90ff120f29ecbfe6bafc449a2f88b9c309961a832ec9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771258986, "uuid": "d4ba195c-3a57-4892-af53-41d2cf135be4", "value": "T14D4302FEFF458CF6D4E040B16B0C424E96518AFCE194E422B14ED89C578734F71AA9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771258986, "uuid": "6ace7161-fab0-4ddf-9c7e-eb062a9270ff", "value": "1536:mccRgToGtjjbpkkRUDYaWQXSca5yfmDVRty25mj:mLRgTrHFNRUTXS6fmjg2cj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771258986, "uuid": "36845a3b-936c-4778-9b70-a75731a5f76a", "value": 59192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771258986, "uuid": "2bbb75af-baa0-4b12-9159-fe0514b621f1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29e96efb-0b5d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771263018, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771263018, "uuid": "c948b391-327f-4406-870c-832825422dc0", "comment": "Malware payload", "value": "0ec29bc78a5bb297afc4054a6ba10260", "object_relation": "md5", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: 050565", "colour": "#eb6d45", "exportable": true, "hide_tag": false }, { "name": "pw-050565", "colour": "#b9d102", "exportable": true, "hide_tag": false }, { "name": "vmprotect", "colour": "#07c2a8", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771263018, "uuid": "e39718d6-9461-4674-a343-73d87417babe", "comment": "Malware payload", "value": "efad97c55c26064e65923a5e2498b74b50e7930e920fb85624365a20f2be8219", "object_relation": "sha256", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: 050565", "colour": "#eb6d45", "exportable": true, "hide_tag": false }, { "name": "pw-050565", "colour": "#b9d102", "exportable": true, "hide_tag": false }, { "name": "vmprotect", "colour": "#07c2a8", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771263018, "uuid": "898821fa-21d5-4942-be07-98b93fc9d042", "value": "T1AB573325F2D45E6E48D59C2F4904DA7B363BF08E746887A7C3D4BCA6B14CA11290BB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771263018, "uuid": "02fe25d7-ade7-4721-b769-48d2a7e723fd", "value": "786432:Q+SIIQnd4tcugzfr4iJqFwub0FfEByU61uh:QV784+5wEqFwub06BQ6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771263018, "uuid": "1aaf5552-525c-45be-a06a-6ba8743d4645", "value": 27243804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771263018, "uuid": "b37cfe69-a3d4-4d44-9160-c8df7cec0979", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ef80a13-0b5d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771263054, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771263054, "uuid": "cb4d674c-355e-4099-b8da-777025f37a79", "comment": "Malware payload", "value": "87df32a214f31d32450d2d5816973174", "object_relation": "md5", "Tag": [ { "name": "farfli", "colour": "#622cad", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#a071f9", "exportable": true, "hide_tag": false }, { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#2b8df4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771263054, "uuid": "2bcdb15b-1078-49b1-920c-92b322b3d4dd", "comment": "Malware payload", "value": "151b2cc9275a34850628dfe7919191ff37f1515ab05d1f3fdb1f5c3734ce28cc", "object_relation": "sha256", "Tag": [ { "name": "farfli", "colour": "#622cad", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#a071f9", "exportable": true, "hide_tag": false }, { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#2b8df4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771263054, "uuid": "0caa0e78-0626-4a87-acc1-7f610ff24d54", "value": "T1376833D3A3BDA634EE9BD453F9794FC9D6CCB82A3635D9843452A7C1682AFD280707", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771263054, "uuid": "158e9375-6721-48a3-a192-3e309765fee6", "value": "3145728:ZRXDXZKoPGOK97iZA353AukzrcfBLxHk34qvCqbq7k+z:ZRXzZKoPjK9B35QzofhxHu4qv5qrz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771263054, "uuid": "f0884b16-83aa-427b-9d0a-38550622f4ca", "value": 142400980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771263054, "uuid": "d2963574-6365-460a-93f3-dbca865b34d0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ecf7bee-0b5d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771263188, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771263188, "uuid": "8f9ca7a1-4591-438f-9778-863615bddaf3", "comment": "Malware payload (Mirai)", "value": "72e6c1b34f11d46858d714105ed8b836", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771263188, "uuid": "cbd0c06f-278f-46f0-823e-b560d45c407d", "comment": "Malware payload (Mirai)", "value": "2794c0c0323058fd26978e492749979a6df335167cb6cebe9ad21de6de4ce72f", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771263188, "uuid": "526f86fb-0cc7-4549-9e27-670d4b9d1d6d", "value": "T12E834A55BC818A22C6D112B7FB6E42CD371653E8D2EF3207C9255FA5378B82B0E7B2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771263188, "uuid": "b683fcc2-c376-4404-94d6-4d4d2ea1436b", "value": "1536:mUjGYM6OnSEr9VzdICfkW9KGHTOsvrulCqMqPr5X1SToBHoPVuqX0TaOkIqm++Ok:mUjGYVOH9BdV7zf6gqrr5FYoBHoPVupJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771263188, "uuid": "2f7dcc79-ac61-4026-a11e-c82a769b04f8", "value": 87364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771263188, "uuid": "03271ebf-5e78-4f4d-9bb8-ebb31811929c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a74e8c14-0abb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771263975, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771263975, "uuid": "13b47143-768a-40ce-9dfa-5dce1ea70d95", "comment": "Malware payload (Mirai)", "value": "ca09db3fb07b83975ae4f548f7b3f92a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771263975, "uuid": "f6c58023-53e4-4f29-869a-ba3524ec09e5", "comment": "Malware payload (Mirai)", "value": "e74b52e34a8fff53883595b683a42b880e1cc425e6a6d259c0137cfb0bd472e7", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771263975, "uuid": "08e097df-dd65-44b6-abc3-2f776be9ff14", "value": "T1913302CDE048AB90DFAC0DFA148C1295D6CCE14122A46F5FEB139599B5BC937B8375", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771263975, "uuid": "f2991e27-1624-40fd-902d-4f8a06730128", "value": "768:KhURDQ70DNKJSF0tmxnNBuKwyXrijvAl/2ENzxGtfLOM5TPVxCDectIiEq8dW/:ib8imFNBurymbY/bxGtfLPPCDhxzT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771263975, "uuid": "8595ef66-c48a-49b0-a22f-0717b83e678d", "value": 53724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771263975, "uuid": "068b8926-84e5-4fa3-82f3-9b5e62002ff4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a75b6aab-0abb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771263975, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771263975, "uuid": "21c85610-8216-4fe4-aee0-424ddcf23f86", "comment": "Malware payload (Mirai)", "value": "97253a15b0867e82703fe78ff7a2e02c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771263975, "uuid": "395096b5-c68c-4d1e-bf9b-67f6cb2ad555", "comment": "Malware payload (Mirai)", "value": "4a4793f97f1b492d648733fbab1e560b0cd4d4e664701733a7e97d0b6042556d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771263975, "uuid": "eb72dd04-6da6-4765-9ba4-d185f1040ec7", "value": "T18103F14C00D79218C96BF1341ADCB31647689759EB0D2398EEE331396651F5C77AC7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771263975, "uuid": "fed58daa-ba04-42b9-9a08-75d88847694b", "value": "768:85zGYSTbsVsuS4pYnfCKFcH5+kjqX6SN5975vRJaI3y2QawSmnbcuyD7UHQRjq:eGe6EefXFaYHV50Oylawrnouy8Hym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771263975, "uuid": "659d16f2-efe0-489c-8956-2c52b31052f1", "value": 39972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771263975, "uuid": "a19237f1-0a7b-416f-8cfb-5c17c1e8ff98", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7427609-0abb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771263975, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771263975, "uuid": "c1ee2200-562e-4128-925e-32bf0f2162a4", "comment": "Malware payload (Mirai)", "value": "f539591cbc5d9cd577fbf63cbf69f875", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771263975, "uuid": "4a0b6446-d6f7-4911-8eb4-73063c184356", "comment": "Malware payload (Mirai)", "value": "fcbda1751d659402fe547997e965b37f03880aedef267833d1d141885986a498", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771263975, "uuid": "daf968df-f08f-464b-a8b8-c5531fa81210", "value": "T1A1F22903127D6517D4E8A63902F39757F2DA7A9CA054871F7E3A0ECBBA613D00F6A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771263975, "uuid": "2c2b2cbd-80b8-487d-a112-e91c2dd771e2", "value": "768:vyQIH1RjyptP7ehBxXOIma2MIh34DqSM2/Sb8BfYPr:vyQIH1RjyptP7e/lO3LkB+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771263975, "uuid": "13072625-8018-4706-9d3e-47460a3c4463", "value": 34648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771263975, "uuid": "f11ec620-78e2-46b6-a2f5-3efeffc2c67c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a75b1f5c-0abb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771264938, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771264938, "uuid": "8594f292-06d3-450a-92a3-ddde8871554f", "comment": "Malware payload (Mirai)", "value": "7ca87d2f2fc3ed21e57f5c8be6c86fec", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771264938, "uuid": "bf6952d8-ee54-4514-9480-4ef3011122d2", "comment": "Malware payload (Mirai)", "value": "9eb2ed94c54993784b23b9f654ecde936b7d5a844703e6361507fa4468f2cd2c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771264938, "uuid": "a60a56b8-f6e1-417a-a73d-97484520138c", "value": "T175E328C7F800DEFDF80AD37648634909B630BB9255921A377317796BEC3A0E44867E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771264938, "uuid": "2424d9fb-3696-42a0-a6a3-30a5df6c26d9", "value": "3072:l5qa2+oF+ye1g7CA2LFoWVZjbiXLMDX4/bVAye+jhAk4o:Sa2+oWg7CLFo3LwiRAye8A/o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771264938, "uuid": "4836c30a-2622-4b1b-96f5-b9ea7a3eba4f", "value": 150368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771264938, "uuid": "b758194e-d7b5-481c-89f1-bc83ece5fd20", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a76bba03-0abb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771264940, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771264940, "uuid": "ed8e6295-fec6-4bc1-be14-e2f41fd972a3", "comment": "Malware payload (Mirai)", "value": "0e9af598ca1a94c7123d460a07884092", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771264940, "uuid": "540e29a7-94a5-4adb-be2a-909cbf56ef04", "comment": "Malware payload (Mirai)", "value": "f71b9ccce705ae0f84546f6e8d9b66a5e98f96d4996f2c176fcea3773d256a7a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771264940, "uuid": "e34912f7-e4a8-470c-8d12-14f4b1fe02f5", "value": "T1C233F153933B57FDFC2648B528A81540D83EA99F68C7079D2AC714BC4C2A2D2EF93B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771264940, "uuid": "482223ec-b879-4da3-8e29-36aabff7d9be", "value": "768:hlQEuWOnM8Io+/L88u5LjFETAvELh/8Dyr8IkHorc8/spNfFmEIq1gTRm7Wux0Xy:45h+/w8qLu8MkyaB8sLfFvIqKTR84y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771264940, "uuid": "d22d0e30-f728-46a8-9444-cdcf9b99f469", "value": 51332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771264940, "uuid": "53a18eeb-15c1-40a7-a118-767ae2fe8105", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c099841a-0b61-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771264989, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771264989, "uuid": "cca661aa-1420-4608-8c7e-b0a537fa0e9a", "comment": "Malware payload (Mirai)", "value": "cff9ce73a1c29be2d5ad9d9240e74347", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771264989, "uuid": "bbcce879-0e27-4410-9009-65bfaff47f16", "comment": "Malware payload (Mirai)", "value": "1e0a5d92e990952e870d2f38a7d3414d2e20e1bedf3d027a83a67648cb1f3e7e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771264989, "uuid": "27eec6f0-81ac-4252-a5d7-7be77f54b925", "value": "T1D8538C7BC9796E44D25881B1B8B08E742B63F08091472FFF1A99C67A9087DACF6053", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771264989, "uuid": "b86599fd-7c06-4c53-a178-12a63d2f7e67", "value": "1536:XlaMwtZivFfWRKmfCK03BjpdVGa5NiC+eiyKgBs/F:VPXv5WRffl07JNisHTM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771264989, "uuid": "3544d9b5-85f4-4d1c-9268-b21b9af51ea9", "value": 63100, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771264989, "uuid": "4ac575fd-36f2-4375-9094-3eeda8acb5ca", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c0999c89-0b61-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771264989, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771264989, "uuid": "0537e1bd-8b8b-4f67-9c64-55500a8bf524", "comment": "Malware payload (Mirai)", "value": "35d11fda9eb4d885c35ce566b43072ed", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771264989, "uuid": "3160bc5c-9e69-4ade-a5df-36a036492d6f", "comment": "Malware payload (Mirai)", "value": "cb90364e57169db6b797864d0512a89addf5858751109dcb2b3e1ac1b0f3eba8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771264989, "uuid": "475a4f06-1e3b-4830-a3f1-e3ba8eb07399", "value": "T1A2F2E1A7A053C862CEF518F7F1278182525A7BD5C09E757233434BE64EE204A7FBC5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771264989, "uuid": "a017b505-cee0-46f4-871b-3012a8144ba3", "value": "768:hyiZP0sbicu6E5HOEQ6GRXzgOAOU+Q+OXy7gntRLq3UirkY9T:4eP0DPn5mDMDRny7otRM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771264989, "uuid": "6e357a4d-c8be-447a-af56-692c57e92db6", "value": 37188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771264989, "uuid": "f9491265-3e58-4f96-a901-c8c133bfba46", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c09a8bb2-0b61-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771264989, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771264989, "uuid": "3fec2bbe-e4e3-4b22-ad73-cbbeaaf2cd07", "comment": "Malware payload (Mirai)", "value": "2726b98a97da1215984c806807c3fe5c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771264989, "uuid": "452fb159-d788-433c-97ff-914f1bd67ff7", "comment": "Malware payload (Mirai)", "value": "5d12b40141ee77e3d55e41c34656f4a5e4de4655acb8e90893230e6ff2f659c9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771264989, "uuid": "1d25d5fd-7f7f-4e7f-bc51-f0edbd5ff8e0", "value": "T1C3F2E1EE8075A5CADA7EEAFE9409676F7146F3A071DF8B89861980C0FF06C93B5550", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771264989, "uuid": "0f7c78bc-26f9-4f45-8492-9729e8874312", "value": "768:GJ7oi8x8c9V4JEhRiESSMtGFYIVbscWTNi:GDc5RiEtfOIgNi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771264989, "uuid": "dc5d2ccf-7747-4c57-9024-0837e2d29b80", "value": 37048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771264989, "uuid": "7b25cf00-a2cb-4b6d-aa56-fd52d0c603fb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c09b3666-0b61-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771264989, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771264989, "uuid": "280ab238-55b9-473d-9758-1a6524c252d4", "comment": "Malware payload (Mirai)", "value": "6fdd18bd69a722772731d612873c128c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771264989, "uuid": "03d57d5b-ed91-41c9-8cdd-689176150208", "comment": "Malware payload (Mirai)", "value": "efc64848b40edd0142e98d0c3eb36dba1a1455073e3859e6396c77d7f55c3e35", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771264989, "uuid": "2e89e1e7-8ce4-4478-9ad4-2d22c60c5b31", "value": "T1B7F2E10A534C8AA1DC61447F1DF50BC08C778BD5E687D996FD69627B426B02A3C42F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771264989, "uuid": "4fe4b862-1c58-4755-95e9-2ca193bbb80e", "value": "768:Q/QW8IVNICzaKpY0bdEcDk+VOm+B8pJSnJgGlzDpuWH:Q/lVNxWcY0hjk+VOFEJSlVEWH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771264989, "uuid": "7150f634-d554-46bc-befe-552e6b2e6b96", "value": 36076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771264989, "uuid": "3116d16f-0c9c-49d3-b589-81d2150c7a66", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c09c2344-0b61-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771264989, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771264989, "uuid": "c0bbd4ac-5a75-4a21-b1e4-13faccf66864", "comment": "Malware payload (Mirai)", "value": "0987f84e807a81c742e344c7cec0cb02", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771264989, "uuid": "01dc2168-3ad7-4aaa-927f-671ed234acab", "comment": "Malware payload (Mirai)", "value": "f5de864c9825ce4fb64e109882b72028447ed5c1fc70a1789fab4387f815cf1e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771264989, "uuid": "6c27bc8d-bd6f-4daf-93d0-3048a76708d3", "value": "T1187339D6F400DD7DF80ED77B44A34A06B630A79146831F3A6797BA67FD721A40862E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771264989, "uuid": "f178301e-8c17-4d13-91e6-f2284d0a1960", "value": "1536:fxIPCFTVdAypsie884++Iu+IVU6uFbTqeecIMh3tjOBXyt:fxIqRrpsieykNmUnFvnh3tact", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771264989, "uuid": "7c470dc0-39e2-47a9-9e7d-88e56c7be206", "value": 79012, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771264989, "uuid": "43708ecd-f39a-4c91-8a60-2292d60efd9d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c09d6012-0b61-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771264989, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771264989, "uuid": "88edc255-836f-4651-9126-340c0e413230", "comment": "Malware payload (Mirai)", "value": "7c404cbc8245e5bc2057e1ad295ea455", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771264989, "uuid": "8ecab267-4edd-47ea-916e-c6f7b56c1b56", "comment": "Malware payload (Mirai)", "value": "b93f17d896a5ddb9e28c35316186b1752c3984412a4141988998b9b77e540a2a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771264989, "uuid": "3a5c00d6-9b48-4443-8edd-55cb88ad4155", "value": "T188E2E1EBD19A5A06ED5D50396C2B3BCECE133A0CF6C049F6E8FC75236903A2527045", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771264989, "uuid": "822e20c4-c3fc-4913-ab2c-b31ca0c18d8a", "value": "768:95YD7vCHpZeJiIZT0++aLKSNPq11L+AjrRXQ2gN4AZuLLvnbcuyD7UG/2q:9iD7vCJ4NQC+S121LTrRR7nouy8Rq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771264989, "uuid": "27f24da6-43a7-4065-af45-05796fab07ef", "value": 32980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771264989, "uuid": "063b071e-8293-4bdf-bc3b-31ae08cdc703", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8cee16d-0b61-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771265057, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771265057, "uuid": "e547daa1-c4c4-4ae2-9e84-043ccf7a4887", "comment": "Malware payload (Mirai)", "value": "ea2a750283c04dec1931cc42214d2051", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771265057, "uuid": "2b9a5017-eac0-4be4-a6a8-1614ab8acf4f", "comment": "Malware payload (Mirai)", "value": "75da5b355dfdf5676431e73b09b10cc471500f1e6142215c02456319df1d0e55", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771265057, "uuid": "d4213c40-0e46-43d5-9996-0d145fae3be6", "value": "T1FBE2D0F5E09C5D66EAAF9CB4AF44A2C073E40F897DEBF6C150D093E6542122376684", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771265057, "uuid": "e2d43512-b223-443e-aa20-6687a180fd18", "value": "768:RFpDiy7GZMdKbSlQvi29M6DmXjVn1mQ6DZ0BBUi4uVcqgw0X7JkmWET:R/BSZMdmMQK29MEKjLmQz4u+qgw09/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771265057, "uuid": "12bb2888-754d-4946-8358-9b2f65a0e254", "value": 33700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771265057, "uuid": "5c4a13f8-fe7a-4ba1-b455-28a0971fd2a0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8cf5198-0b61-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771265057, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771265057, "uuid": "dd01c02b-531b-49d3-97d8-f006721c26d8", "comment": "Malware payload (Mirai)", "value": "6436e628a1a90d9caa72b89d3be5ce42", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771265057, "uuid": "ae613bdb-f07b-4884-9285-e920087d849d", "comment": "Malware payload (Mirai)", "value": "ed27f3eb11ba7ae3351bc716586ee9bb44a0ae1153b5042f03eb77b09e36af56", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771265057, "uuid": "7557ba01-c614-4881-9589-f4ec9cc4b409", "value": "T1AA82BF62C85334E1C7700C73D87812051BB61FB8C5BB7573A7998B189BB06B35AFA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771265057, "uuid": "219eba85-b583-45aa-a076-c5380238b460", "value": "384:kBGlSSOt5lGwpGUT2f5qpdKgZd24hGXAqnIKNh9zzIG9MoZmdGU57DfwQ:kBGlShlYF5qpdPQBn9HJn3UyQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771265057, "uuid": "7615a9bd-3745-40b5-bc98-695e4f7e001a", "value": 18736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771265057, "uuid": "79699e50-33ca-4c9d-8c72-4f6894a52af1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8d470b9-0b61-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771265057, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771265057, "uuid": "9186292d-70df-40ec-84a9-58e5103bee94", "comment": "Malware payload (Mirai)", "value": "60a848d364d7094870023ec831a2dfe2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771265057, "uuid": "4efb7c40-be66-45ab-8d9e-c00653300ec8", "comment": "Malware payload (Mirai)", "value": "bf87d8024384db80b9a6378054771fe3a25b6368a135411f5586f8c4fa4a2f80", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771265057, "uuid": "338a66d1-425e-4329-8959-101a03f05137", "value": "T14E4302488700201284F53437E5B5D44FCEEB627C69B9F9C024794ABC7A836A1AF39D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771265057, "uuid": "4a2e71cf-8ae6-46ba-9b44-24cb95a1bef7", "value": "1536:xmhr0v27Su5SyLWAQboe3WBTsFRNHpYURCb8YaU4/o9BZVfeb:xQ70uhQboe3JpHaURU8RctO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771265057, "uuid": "91335f6c-1566-459e-8ac9-fab41403a6c3", "value": 58972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771265057, "uuid": "f1e90ef4-b69c-48f0-8327-82b8bfd163fc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e86fb988-0b67-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771267633, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771267633, "uuid": "076544bd-3a73-48bb-b139-6d9e7ca0847c", "comment": "Malware payload", "value": "0b012da1ef0cf894af47e96b30c5e23e", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771267633, "uuid": "8e9f3676-85e0-4817-b62e-0087441d64bd", "comment": "Malware payload", "value": "9402468443164c579f7cd8594d8707efb42ca143d1ebe3244a7c5efb9a117b85", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771267633, "uuid": "f2cce817-3a33-4716-bc33-d2764c2e7bb5", "value": "T1EAC3F846BD418F13C5C321F7FBDE42983A266F6DD6FA32029925BFA037864D60D3A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771267633, "uuid": "5b2e0233-e011-4e99-bf26-bd1e9d7475e2", "value": "1536:sCpIsn98Pqk4VxKwTsd9nWEO2G5K4o0P5TlLawywHQwmw1QoVysaLbEwv2tW6v:sCln9m4GwAdZAvoGjVe2tW6v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771267633, "uuid": "d28c8daf-d967-495c-997b-21be946b10e1", "value": 126432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771267633, "uuid": "13057e12-2d8f-4553-af9c-d51c88d48a7a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771286293, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286293, "uuid": "b923b69c-a400-4f95-8a9d-50dbcc81c7ad", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286293, "uuid": "ddcf7b98-bddf-4f69-ada9-8d07efeefe9a", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286293, "uuid": "24646a8e-6232-4826-b95d-62c8c91bb81f", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286293, "uuid": "86e566fa-6905-4f02-b614-b40de9f96625", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771286293, "uuid": "686586fe-1e5d-4a7e-a9c7-d42c57027ca9", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771200553, "uuid": "b98aaea5-0acb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.80.31:57576/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771200666, "uuid": "fcd88e3e-0acb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://andrefelipedonascime1768785037020.1552093.meusitehostgator.com.br/RBjtF_Meus_Arquivos_De_Texto/03.txt", "Tag": [ { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771201039, "uuid": "db33a070-0acc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.80.70:54814/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771201277, "uuid": "696ff3e2-0acd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.142.42:39563/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771201336, "uuid": "8c6ebd07-0acd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.105.253:49372/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771201638, "uuid": "4044001b-0ace-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.4.186:38079/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771202287, "uuid": "c303a6d6-0acf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://s3.amber9stash.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771202362, "uuid": "efdd9371-0acf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.69/arm/", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771202411, "uuid": "0ce6df12-0ad0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.253.94:56274/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771202662, "uuid": "a278c241-0ad0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.17.139:35897/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771202719, "uuid": "c4b8adb2-0ad0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.17.139:35897/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203081, "uuid": "9c610d7c-0ad1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.24.11:38448/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203095, "uuid": "a4d15bdc-0ad1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.80.70:54814/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203277, "uuid": "1144d9f1-0ad2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.57.70:60675/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203561, "uuid": "ba6d5184-0ad2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.4.186:38079/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203740, "uuid": "251e941f-0ad3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.221.66.75/hiddenbin/boatnet.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203740, "uuid": "25202349-0ad3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.221.66.75/hiddenbin/boatnet.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203740, "uuid": "2536ab2e-0ad3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.221.66.75/hiddenbin/boatnet.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203740, "uuid": "253c6605-0ad3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.221.66.75/hiddenbin/boatnet.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203740, "uuid": "25591126-0ad3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.221.66.75/hiddenbin/boatnet.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203740, "uuid": "25625e43-0ad3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.221.66.75/hiddenbin/boatnet.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203740, "uuid": "256f4b5f-0ad3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.221.66.75/hiddenbin/boatnet.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203740, "uuid": "257037f8-0ad3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.221.66.75/hiddenbin/boatnet.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203740, "uuid": "257286d8-0ad3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.221.66.75/hiddenbin/boatnet.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203792, "uuid": "44748dd5-0ad3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.221.66.75/hiddenbin/boatnet.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771203875, "uuid": "76062890-0ad3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.213.138:53154/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771204033, "uuid": "d402c10a-0ad3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.253.94:56274/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771204086, "uuid": "f3c6026f-0ad3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://data-flow-central.amber9stash.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771204520, "uuid": "f61bb93d-0ad4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.112.193:36121/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771204581, "uuid": "1a58558d-0ad5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.72.77:39234/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771204878, "uuid": "cb866c60-0ad5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.45.161:36852/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771204879, "uuid": "cc0eaeab-0ad5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.57.70:60675/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771206082, "uuid": "9935b2fe-0ad8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.237.25:45444/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771206201, "uuid": "dfe29615-0ad8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.46.75:44543/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771206439, "uuid": "6df6af6d-0ad9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.45.161:36852/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771206619, "uuid": "d94bd0e5-0ad9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.164.205:51009/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771206697, "uuid": "07eb86b1-0ada-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.91.136:37136/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771207162, "uuid": "1d3097b1-0adb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.74.224:45617/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771207223, "uuid": "413eb8e9-0adb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.100.21:39279/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771207277, "uuid": "6178ca6f-0adb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.116.126:41182/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771207642, "uuid": "3b0bf1cc-0adc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.164.205:51009/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771207698, "uuid": "5c47ac77-0adc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.237.25:45444/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771207750, "uuid": "7b63ad50-0adc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.36.133:57509/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771208111, "uuid": "52ab89bf-0add-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.91.136:37136/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771208528, "uuid": "4b60d389-0ade-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.74.224:45617/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771208655, "uuid": "96ed2a35-0ade-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.100.21:39279/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771209070, "uuid": "8e6f21e8-0adf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.164:35112/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771209071, "uuid": "8ebb92c2-0adf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.36.133:57509/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771209136, "uuid": "b59cafce-0adf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.164:35112/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771209187, "uuid": "d3d989c0-0adf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.48.235:45809/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771209187, "uuid": "d3e262ff-0adf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.223.124:58678/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771209691, "uuid": "0061b684-0ae1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.213.138:53154/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771210154, "uuid": "14278f5e-0ae2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.233.131:54323/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771210217, "uuid": "39afabd3-0ae2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.232.214:38774/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771210267, "uuid": "57830cda-0ae2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://node-v99.amber9stash.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771210517, "uuid": "ecb0a30d-0ae2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.102.167:57492/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771210686, "uuid": "5199a162-0ae3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.88.171:35010/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771210806, "uuid": "990209b1-0ae3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.151/t.sh", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771210871, "uuid": "bfd5e7af-0ae3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.64.228:36279/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771210997, "uuid": "0ad8c602-0ae4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.48.235:45809/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771211524, "uuid": "452ea9c3-0ae5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.151/bbc", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771211597, "uuid": "7034566d-0ae5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.233.131:54323/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771212256, "uuid": "f9387905-0ae6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.102.167:57492/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771212430, "uuid": "60ce4f36-0ae7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.64.228:36279/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771212667, "uuid": "ee03fc63-0ae7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://ws.nifty4locker.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771213692, "uuid": "50e9bc89-0aea-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.47.9:49215/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771213750, "uuid": "7385bfb8-0aea-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://secure-access-point.nifty4locker.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771213996, "uuid": "061a9e80-0aeb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.14.208:42995/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771214646, "uuid": "897b0564-0aec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn-b12.nifty4locker.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771215552, "uuid": "a5a48640-0aee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.189.224:33303/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771215679, "uuid": "f13d4551-0aee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.14.208:42995/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771215679, "uuid": "f15c7b85-0aee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.213.39:39741/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771215797, "uuid": "37d363ac-0aef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.47.9:49215/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771215798, "uuid": "386b734c-0aef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.37.242:34790/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771215977, "uuid": "a2e25923-0aef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.223.169.13:41687/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771216036, "uuid": "c686427e-0aef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.53.143:37626/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771216215, "uuid": "310a1b42-0af0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.195.49:39503/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771216215, "uuid": "311aa8c7-0af0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.53.143:37626/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771217238, "uuid": "92a804b6-0af2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.130.84:40479/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771217240, "uuid": "93b9a983-0af2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.125.31:48244/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771217286, "uuid": "af6269b1-0af2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://api.orbit6crate.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771217360, "uuid": "db25665b-0af2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.251.59:47349/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771217476, "uuid": "20bbc702-0af3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.122.102:36580/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771217650, "uuid": "888e8cc4-0af3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.4.190:50791/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771217777, "uuid": "d3e4d0ee-0af3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.156.98.34:45125/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771217894, "uuid": "19e55c90-0af4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.37.242:34790/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771218556, "uuid": "a487706e-0af5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.38.71:40667/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771218639, "uuid": "d5d0d956-0af5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.254.249.125:52050/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771218677, "uuid": "ec84a3a5-0af5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.122.102:36580/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771218795, "uuid": "32df05f0-0af6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.125.31:48244/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771218846, "uuid": "5163208c-0af6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://global-sync-srv.orbit6crate.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771218909, "uuid": "7687bcc4-0af6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.251.59:47349/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771219268, "uuid": "4c8e6dcf-0af7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.156.98.34:45125/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771219336, "uuid": "7505c6d3-0af7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.4.190:50791/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771219517, "uuid": "e165e944-0af7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.158.1:60923/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771219530, "uuid": "e8e9dae9-0af7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.254.249.125:52050/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771219687, "uuid": "4642ab6c-0af8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.208.150.65:54822/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771219753, "uuid": "6dc9fdb8-0af8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.241.68:39863/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771219819, "uuid": "94fd2487-0af8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.38.71:40667/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771220409, "uuid": "f4dfe30d-0af9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.97.230:55603/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771220477, "uuid": "1d616ed8-0afa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.126.94:46375/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771220706, "uuid": "a5d8657a-0afa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.69/tplink.sh", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771220723, "uuid": "afaeb613-0afa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.211.4:52268/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771220723, "uuid": "afb786a0-0afa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.214.185:35673/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771220779, "uuid": "d10fb5fc-0afa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.89.197:44957/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771220833, "uuid": "f1651746-0afa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.102.129:33940/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771221006, "uuid": "58dca2ac-0afb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate-07.orbit6crate.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771221128, "uuid": "a11f10af-0afb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/5926060486/fdkr9E3.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771221796, "uuid": "2fabd86f-0afd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.102.129:33940/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771222037, "uuid": "befc4ed5-0afd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.126.94:46375/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771222098, "uuid": "e3c74582-0afd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.97.230:55603/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771222148, "uuid": "015d02d8-0afe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.plum5parcel.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771222277, "uuid": "4e30c6f9-0afe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.89.197:44957/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771222397, "uuid": "95c32b0a-0afe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.211.4:52268/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771222696, "uuid": "4805aae2-0aff-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.44.5:46808/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771222817, "uuid": "9005bf1c-0aff-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.44.5:46808/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771223054, "uuid": "1d9199d6-0b00-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.26.62:50179/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771223120, "uuid": "44b89c4d-0b00-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.233.123:50825/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771223468, "uuid": "1438cdf6-0b01-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/5926060486/gHcZQCz.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771223608, "uuid": "67b59d3d-0b01-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.246.6.195:48958/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771223727, "uuid": "ae394e21-0b01-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.246.6.195:48958/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771223825, "uuid": "e91b3934-0b01-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://internal-web-proxy.plum5parcel.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771224503, "uuid": "7cd2fbd2-0b03-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.223.246:57910/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771224617, "uuid": "c100d51a-0b03-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.26.62:50179/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771224861, "uuid": "525beed4-0b04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.233.123:50825/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771225386, "uuid": "8b5dc11c-0b05-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cloud-m3.plum5parcel.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771225879, "uuid": "b13aa68d-0b06-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.22.108:33013/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771225997, "uuid": "f79e3463-0b06-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.22.108:33013/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771225999, "uuid": "f8e80914-0b06-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.81.23:51752/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771226528, "uuid": "33b4ce5d-0b08-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.223.246:57910/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771226896, "uuid": "0f1dafa3-0b09-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.27.164:40452/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771226961, "uuid": "363a3999-0b09-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.200.25.151:38812/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771227082, "uuid": "7de617c6-0b09-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.67.74:36847/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771227095, "uuid": "85ed6973-0b09-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.0.120.124:57445/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771227683, "uuid": "e478a40e-0b0a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.12.40:47750/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771228278, "uuid": "475a4995-0b0c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.181.158.75:59722/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771228451, "uuid": "ae38845e-0b0c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.84.216:40969/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771228451, "uuid": "ae3884cd-0b0c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.101.254:57777/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771228627, "uuid": "171382d8-0b0d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://x7p9a.blu45modern.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771228707, "uuid": "470e04dc-0b0d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.27.164:40452/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771228707, "uuid": "470e08d0-0b0d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.0.120.124:57445/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771228881, "uuid": "ae9d99b1-0b0d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.233.234:36309/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229005, "uuid": "f8923490-0b0d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.189/HideChaotic/sora.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229005, "uuid": "f8923795-0b0d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.189/HideChaotic/sora.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229005, "uuid": "f8923e44-0b0d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.189/HideChaotic/sora.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229005, "uuid": "f8923f47-0b0d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.189/HideChaotic/sora.mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229005, "uuid": "f892fc9f-0b0d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.189/HideChaotic/sora.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229046, "uuid": "10bb0947-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://allcheat.netlify.app/cvExecute.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229046, "uuid": "10d2d9aa-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://devc.ws/%D0%92ootst%D0%B0%D1%80%D1%80%D0%B5%D0%B3%D1%83%D0%BEs%D1%8564.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: ryos", "colour": "#51c7ee", "exportable": true, "hide_tag": false }, { "name": "pw-ryos", "colour": "#201b00", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229047, "uuid": "114b73b0-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.240/nullnet_bin_dir/nullnet_load.arc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229057, "uuid": "1776c11f-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cyx.technol.sbs/Cyrex.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: cyrex", "colour": "#c7fa8e", "exportable": true, "hide_tag": false }, { "name": "pw-cyrex", "colour": "#d542d1", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229089, "uuid": "2a79a028-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://luq.technol.sbs/LunX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: lunex", "colour": "#cb4cba", "exportable": true, "hide_tag": false }, { "name": "pw-lunex", "colour": "#A9A8CD", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229112, "uuid": "38099b66-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.118:444/nigga.sh", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229115, "uuid": "3a33b012-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.240/nullnet_bin_dir/nullnet_load.sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229115, "uuid": "3a368c53-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.64.121/x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229115, "uuid": "3a39cf21-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.64.121/powerpc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "3a41ea46-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.64.121/i586", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "3a48a92e-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.240/nullnet_bin_dir/nullnet_load.arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "3a48cb95-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.106.146.195/bins/narm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "3a522e06-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.106.146.195/bins/narm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "3a542778-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.106.146.195/bins/nppc440", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "3a716210-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.56.149.224/cacti/install.tgz", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "3a74583c-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.240/nullnet_bin_dir/nullnet_load.i486", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "3a74e7b9-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.64.121/armv6l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "3a75004f-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.240/nullnet_bin_dir/nullnet_load.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "3a7809d4-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.106.146.195/bins/nx486", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "3a78624d-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.64.121/armv4l", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "3a789315-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.64.121/sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "3a7a7ae9-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.240/nullnet_bin_dir/nullnet_load.arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "3a7e1854-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.64.121/i686", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "3a7f53af-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.240/nullnet_bin_dir/nullnet_load.x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "3a808382-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.240/nullnet_bin_dir/nullnet_load.ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "3a80f0a4-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.106.146.195/bins/nmpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "3a8357be-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.106.146.195/bins/narm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "3a849146-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.106.146.195/bins/nppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "3a864370-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.106.146.195/bins/nx86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "3a8c939e-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.106.146.195/bins/nx86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "3a8dee2e-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.64.121/mipsel", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "3a9a1933-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.240/nullnet_bin_dir/nullnet_load.mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "3a9ac10b-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.106.146.195/bins/nsh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "3ab4b6a4-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.64.121/armv5l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "3ab65eda-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.240/nullnet_bin_dir/nullnet_load.spc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "3ac043d5-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.240/nullnet_bin_dir/nullnet_load.i686", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229116, "uuid": "3ad78e41-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.240/nullnet_bin_dir/nullnet_load.arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229117, "uuid": "3b05b199-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.106.146.195/bins/nmips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229117, "uuid": "3b13b344-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.240/nullnet_bin_dir/nullnet_load.m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229119, "uuid": "3c5a7330-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.64.121/m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229119, "uuid": "3c5e09a1-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.106.146.195/bins/nx686", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229119, "uuid": "3c6015f1-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.240/nullnet_bin_dir/nullnet_load.x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229119, "uuid": "3c6f71d8-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.240/nullnet_bin_dir/nullnet_load.arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229119, "uuid": "3c86d308-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.64.121/mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229119, "uuid": "3c9ac978-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.106.146.195/bins/nm68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229120, "uuid": "3cc59402-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.56.149.224/cacti/aminer.gz", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229120, "uuid": "3d1abd65-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.106.146.195/bins/narm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229127, "uuid": "40f703a9-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://uyrhfkkfbf.vercel.app/ssa_real.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229127, "uuid": "415c23d3-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://candacradhd.vercel.app/canada.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229127, "uuid": "41607100-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://atofielshd.vercel.app/atto.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229130, "uuid": "42b09c31-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://m.jkoa.co.kr/15%EC%8B%AC%ED%94%8C%EC%8A%A4%EC%BA%94.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229166, "uuid": "58784532-0b0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.64.121/sparc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229480, "uuid": "13cc3650-0b0f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.17.21:41704/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229653, "uuid": "7a6955db-0b0f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.148.51:56688/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229710, "uuid": "9ce3440b-0b0f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.84.216:40969/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229711, "uuid": "9cecaa06-0b0f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.12.40:47750/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229896, "uuid": "0b70335d-0b10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.181.158.75:59722/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771229896, "uuid": "0b704d43-0b10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.233.234:36309/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771230669, "uuid": "d80dfc4c-0b11-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://atelier.blu45modern.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771230862, "uuid": "4b2cf068-0b12-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.52.73:55837/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771231026, "uuid": "ad179d06-0b12-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://m0d-rnflux.blu45modern.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771231038, "uuid": "b41766b7-0b12-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.26.74:34390/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771231039, "uuid": "b48e9920-0b12-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.148.51:56688/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771231567, "uuid": "ef6c2734-0b13-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://q4m8v.believein41fant.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771231568, "uuid": "efd7f1b0-0b13-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://msidownloads.duckdns.org/Nueva%20carpeta/vm.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771231573, "uuid": "f338bbbb-0b13-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://msidownloads.duckdns.org/Nueva%20carpeta/Copi.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771231685, "uuid": "3605dc63-0b14-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.47.183/11/fsf2029093290ds09h98g93j2j3hj23j8f98d9fs9d8f98.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771231687, "uuid": "3740c0b9-0b14-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.47.183/178/sdf27672767sdf727676fds66dsg68g67367647637767d.txt", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771231688, "uuid": "375561e9-0b14-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.47.183/179/545dfdfd6656565666565ggf656566665trtttrt.txt", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771231745, "uuid": "598298db-0b14-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.155.116/16/sdf989f9g89fd9sg8g34jhj43hjhjgfd989d9g98d9fg9df98g9.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771231746, "uuid": "5a5c60c2-0b14-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://96.44.154.205/156/ecu/ece.doc", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771231930, "uuid": "c81a06bf-0b14-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.52.73:55837/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771231932, "uuid": "c8e89ab1-0b14-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.46.75:44543/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771232179, "uuid": "5bfddd7a-0b15-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.29.50.238:44025/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771232200, "uuid": "68c02f2a-0b15-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.11.130:36579/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771232366, "uuid": "cbbde954-0b15-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.20.255:58293/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771232843, "uuid": "e8103e19-0b16-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.0.18:47665/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771232886, "uuid": "0198dd0b-0b17-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://horizon.believein41fant.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771233260, "uuid": "e0b9e10d-0b17-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.13.207:43028/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771233309, "uuid": "fd8da82c-0b17-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://be1ieve-vvave.believein41fant.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771233677, "uuid": "d954b280-0b18-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.29.50.238:44025/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771233856, "uuid": "43a09e8a-0b19-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.35.235:41949/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771233873, "uuid": "4df15e3c-0b19-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.246.225.30:41988/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771233978, "uuid": "8c4c291e-0b19-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.20.255:58293/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771234042, "uuid": "b26ad5c2-0b19-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.22.157:47108/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771234339, "uuid": "637b9cb8-0b1a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.13.207:43028/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771234386, "uuid": "7fde5c25-0b1a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://t6k2n.khlopotun6turn.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771234635, "uuid": "145ea292-0b1b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.212.10:51040/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771234758, "uuid": "5da194e2-0b1b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.0.18:47665/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771234867, "uuid": "9e7ffd48-0b1b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://workshop.khlopotun6turn.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771235248, "uuid": "81ccba09-0b1c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.56.148.106:56861/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771235896, "uuid": "038189da-0b1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.136.215:36624/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771236019, "uuid": "4d596aef-0b1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.22.157:47108/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771236127, "uuid": "8d344882-0b1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.15.155.121:13201/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771236127, "uuid": "8d81b3aa-0b1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://superbet388.one/aplikasi/Superbet388.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771236130, "uuid": "8f804516-0b1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://infinitaki.com/TikTok18.apk", "Tag": [ { "name": "trickmo", "colour": "#acf486", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771236138, "uuid": "93baa1f1-0b1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.159.146:46177/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771236145, "uuid": "9833bc17-0b1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://m.meta-dm.com/file/ueditor/php/upload/file/20250114/x1/REF-CLI%20v1.0.3.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771236251, "uuid": "d72ed189-0b1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.144.64.166:81/epshteyn_arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771236251, "uuid": "d73173c8-0b1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.144.64.166:81/tplink.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771236251, "uuid": "d73176be-0b1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.144.64.166:81/epshteyn_mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771236251, "uuid": "d73398fe-0b1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.144.64.166:81/epshteyn_arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771236251, "uuid": "d738ae76-0b1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.144.64.166:81/epshteyn_ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771236251, "uuid": "d738af23-0b1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.144.64.166:81/epshteyn_i486", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771236251, "uuid": "d738c3bc-0b1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.144.64.166:81/epshteyn_arc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771236251, "uuid": "d738dce1-0b1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.144.64.166:81/epshteyn_sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771236251, "uuid": "d738e1db-0b1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.144.64.166:81/epshteyn_mips32", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771236251, "uuid": "d738e389-0b1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.144.64.166:81/epshteyn_x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771236251, "uuid": "d738e578-0b1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.144.64.166:81/epshteyn_arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771236251, "uuid": "d73ec3c1-0b1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.144.64.166:81/epshteyn_riscv64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771236251, "uuid": "d73f0a32-0b1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.144.64.166:81/epshteyn_aarch64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771236251, "uuid": "d73f6be2-0b1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.144.64.166:81/epshteyn_arm4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771236251, "uuid": "d742d7d7-0b1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.144.64.166:81/matrix.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771236251, "uuid": "d74300a4-0b1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.144.64.166:81/epshteyn_ppc440", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771236251, "uuid": "d74d0886-0b1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.144.64.166:81/vitek.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771236251, "uuid": "d74d7a53-0b1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.144.64.166:81/epshteyn_riscv32", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771236251, "uuid": "d751835f-0b1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.144.64.166:81/epshteyn_mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771236251, "uuid": "d7603040-0b1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.168.239:34255/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771236251, "uuid": "d76e66ea-0b1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.150.236:50435/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771236252, "uuid": "d7e27604-0b1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.184.179.197:35212/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771236306, "uuid": "f8221b99-0b1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.144.64.166:81/epshteyn_spc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771236306, "uuid": "f824b5f1-0b1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.144.64.166:81/cnpilot.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771236306, "uuid": "f846b913-0b1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.144.64.166:81/epshteyn_m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771236378, "uuid": "22e958b9-0b1f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.161.246:54187/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771237031, "uuid": "a810b585-0b20-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.23.228:51012/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771237031, "uuid": "a8149f14-0b20-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.56.148.106:56861/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771237215, "uuid": "1610ec5d-0b21-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.202.214:40659/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771237388, "uuid": "7cf8255b-0b21-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://kh10p0-rnate.khlopotun6turn.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771237390, "uuid": "7dfdb750-0b21-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://3aofxgg5.orbit44kind.digital/?=check&&actmn=CeCWFzKXkbzLvPTd", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771237511, "uuid": "c6458586-0b21-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.159.146:46177/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771237808, "uuid": "77177d7d-0b22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8227038158/PlgS3C9.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771237811, "uuid": "79528375-0b22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.49.109:53162/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771237938, "uuid": "c4b00505-0b22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.161.246:54187/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771238111, "uuid": "2c487efc-0b23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://m9r3p.pitman123wid.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771238118, "uuid": "305c797a-0b23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.51.202:59822/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771238119, "uuid": "3076a4c1-0b23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.232.95:46202/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771238297, "uuid": "9b27321a-0b23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.46.46:57061/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771238301, "uuid": "9d005b14-0b23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.51.202:59822/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771238646, "uuid": "6b2a3fd2-0b24-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7103746036/qvfjiKH.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771238770, "uuid": "b4b10216-0b24-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.88.99:37471/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771238831, "uuid": "d9418877-0b24-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.202.214:40659/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771238889, "uuid": "fbffe3bc-0b24-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.23.228:51012/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771239066, "uuid": "654e195c-0b25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://ledger.pitman123wid.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771239432, "uuid": "3f6300df-0b26-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.64.174.98:45989/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771239610, "uuid": "a9a32eb5-0b26-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7782139129/gco3Wtk.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771239669, "uuid": "cca61d2e-0b26-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.247.177:43415/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771239755, "uuid": "ffa1d714-0b26-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.83.131:52097/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771240394, "uuid": "7cec55bf-0b28-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.88.99:37471/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771240446, "uuid": "9be27e8c-0b28-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7974514863/UmtscnX.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Fuery", "colour": "#fb3e08", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771240566, "uuid": "e381adcc-0b28-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://p1trnan-vvex.pitman123wid.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771240631, "uuid": "0a3c0a54-0b29-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.37.83:45896/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771240638, "uuid": "0e07fe24-0b29-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.12.45:59146/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771240870, "uuid": "98664503-0b29-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.80.221.155:47390/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771240933, "uuid": "be218761-0b29-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.64.174.98:45989/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771241227, "uuid": "6d87b052-0b2a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://z3n7a.reporter9speck.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771241286, "uuid": "907acc94-0b2a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.247.177:43415/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771241287, "uuid": "90d70dab-0b2a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.88.119:55159/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771241837, "uuid": "d9281c63-0b2b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.9.23:52334/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771241949, "uuid": "1bb558c0-0b2c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.37.83:45896/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771242607, "uuid": "a3d4f0fb-0b2d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://dispatch.reporter9speck.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771242803, "uuid": "185f20b1-0b2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.171.223:57313/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771243146, "uuid": "e53920d8-0b2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://rep0rt-rnix.reporter9speck.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771243156, "uuid": "eb36ecf8-0b2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.88.119:55159/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771243628, "uuid": "04156fe9-0b30-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.206.83:59556/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771243763, "uuid": "55196eeb-0b30-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.207.214:56131/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771243818, "uuid": "75c62de1-0b30-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.186.90.66:23093/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771243818, "uuid": "75c6bef4-0b30-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.41.212.5:8083/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771243818, "uuid": "75d864be-0b30-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.146.224.113:28437/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771243818, "uuid": "75e27e1d-0b30-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.206.152.28:32192/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771243819, "uuid": "75f00b09-0b30-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.224.156.200/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771243819, "uuid": "75fa8d8e-0b30-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.189.128.173:8080/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771243819, "uuid": "7663f670-0b30-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.238.254:2000/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771243820, "uuid": "76c85b21-0b30-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.236.150.80:12164/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771243823, "uuid": "7881130b-0b30-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.209.109.128:85/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771243825, "uuid": "79a63bd0-0b30-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.209.68.12:85/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771243939, "uuid": "bdf9fa94-0b30-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.200.193.211:8086/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771244111, "uuid": "242a1da6-0b31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.75.196:50879/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771244587, "uuid": "401bff98-0b32-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.206.83:59556/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771244662, "uuid": "6c8f4f74-0b32-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.171.223:57313/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771244886, "uuid": "f219f839-0b32-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.up3me.cc/?c=cGXvEgv949Hv4SreY2v_OTs8Z-7n5Cqw9l9jPJG65GC3A1riBz4JRBlKnIFs-IqV", "Tag": [ { "name": "dllHijack", "colour": "#719F48", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#a071f9", "exportable": true, "hide_tag": false }, { "name": "Win32/Malgent!MSR", "colour": "#4f9551", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771244900, "uuid": "fa9e9ce2-0b32-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.116.78:33501/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771245188, "uuid": "a61659b2-0b33-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.161.142:46950/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771245247, "uuid": "c9a9f3b6-0b33-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://c9t5q.paw85silhouette.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771245257, "uuid": "cf84c87f-0b33-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.75.196:50879/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771245606, "uuid": "9f6bfef5-0b34-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.118:444/client.x86_64", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771245606, "uuid": "9f6d51ed-0b34-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.118:444/client_armv64", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771245606, "uuid": "9f6e1e60-0b34-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.118:444/client_arm7", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771245609, "uuid": "a104a088-0b34-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.118:444/client_armv7", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771245609, "uuid": "a11851e2-0b34-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.118:444/client_mips", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771245609, "uuid": "a12067b6-0b34-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.118:444/client_x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771245609, "uuid": "a12e83d0-0b34-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.118:444/client_x86", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771245609, "uuid": "a13d5abb-0b34-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.118:444/client_mipsel", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771245609, "uuid": "a14c20ce-0b34-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.118:444/client_arm64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771245609, "uuid": "a1552173-0b34-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.118:444/client_ppc64le", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771245612, "uuid": "a2bcfda4-0b34-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://eishin-kk-co.asia/dev/ENCRYPTEDP.ps1", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771245799, "uuid": "123ec93e-0b35-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.198.193:47508/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771245907, "uuid": "52b0624d-0b35-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://contour.paw85silhouette.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771245908, "uuid": "534269b8-0b35-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://store-na-phx-4.gofile.io/download/direct/cbd8ed80-2067-4791-9d7e-8a3d4d41864f/Adobe_Acrobat_Reader.js", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771246465, "uuid": "9f6da8b8-0b36-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.116.78:33501/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247301, "uuid": "91f2a357-0b38-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.198.193:47508/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247482, "uuid": "fd91f172-0b38-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.12.158:46824/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247720, "uuid": "8b6c5628-0b39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.64.93:50454/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247772, "uuid": "aa60684e-0b39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.114.147/ISIS.sh", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247772, "uuid": "aa613510-0b39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.114.147/a-r.m-4.ISIS", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247772, "uuid": "aa615fa7-0b39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.114.147/m-6.8-k.ISIS", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247772, "uuid": "aa61698e-0b39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.114.147/s-h.4-.ISIS", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247772, "uuid": "aa616987-0b39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.114.147/p-o.w-e.ISIS", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247772, "uuid": "aa616cf9-0b39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.114.147/m-p.s-l.ISIS", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247772, "uuid": "aa616f2c-0b39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://messageforms.com/ISIS.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247772, "uuid": "aa617da1-0b39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.114.147/i-5.8-6.ISIS", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247772, "uuid": "aa619809-0b39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://messageforms.com/a-r.m-5.ISIS", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247772, "uuid": "aa61a6e9-0b39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://messageforms.com/p-o.w-e.ISIS", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247772, "uuid": "aa64581c-0b39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://messageforms.com/p-p.c-.ISIS", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247772, "uuid": "aa66b888-0b39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://messageforms.com/a-r.m-6.ISIS", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247772, "uuid": "aa66d02f-0b39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://messageforms.com/m-i.p-s.ISIS", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247772, "uuid": "aa67426c-0b39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.114.147/x-8.6-.ISIS", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247772, "uuid": "aa6b54db-0b39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.114.147/a-r.m-5.ISIS", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247772, "uuid": "aa6be036-0b39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://messageforms.com/a-r.m-4.ISIS", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247772, "uuid": "aa6c21b3-0b39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://messageforms.com/a-r.m-7.ISIS", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247772, "uuid": "aa6c2540-0b39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.114.147/a-r.m-7.ISIS", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247772, "uuid": "aa6cdd29-0b39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.114.147/a-r.m-8.ISIS", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247772, "uuid": "aa6d42cd-0b39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://messageforms.com/s-h.4-.ISIS", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247772, "uuid": "aa7919dd-0b39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://messageforms.com/x-8.6-.ISIS", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247772, "uuid": "aa7a1e12-0b39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.114.147/x-3.2-.ISIS", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247772, "uuid": "aa7a529b-0b39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://messageforms.com/m-6.8-k.ISIS", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247772, "uuid": "aa818887-0b39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.114.147/a-r.m-6.ISIS", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247772, "uuid": "aa823e86-0b39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.114.147/p-p.c-.ISIS", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247772, "uuid": "aa8cccf4-0b39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://messageforms.com/i-5.8-6.ISIS", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247772, "uuid": "aa905297-0b39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://messageforms.com/a-r.m-8.ISIS", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771247772, "uuid": "aaa621aa-0b39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://messageforms.com/x-3.2-.ISIS", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771248725, "uuid": "e28d3956-0b3b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.9.60/m-6.8-k.Fourloko", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771248725, "uuid": "e28e507b-0b3b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.9.60/x-8.6-.Fourloko", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771248725, "uuid": "e2909dbb-0b3b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.9.60/a-r.m-4.Fourloko", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771248725, "uuid": "e292ac42-0b3b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.9.60/Fourloko.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771248725, "uuid": "e292ad89-0b3b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.9.60/a-r.m-6.Fourloko", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771248725, "uuid": "e292f393-0b3b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.9.60/x-3.2-.Fourloko", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771248725, "uuid": "e2959527-0b3b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.9.60/i-5.8-6.Fourloko", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771248725, "uuid": "e296523b-0b3b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.9.60/s-h.4-.Fourloko", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771248725, "uuid": "e298a50b-0b3b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.9.60/m-i.p-s.Fourloko", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771248725, "uuid": "e298b6aa-0b3b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.9.60/a-r.m-7.Fourloko", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771248725, "uuid": "e2a41e23-0b3b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.9.60/m-p.s-l.Fourloko", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771248726, "uuid": "e2c94de1-0b3b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.9.60/p-p.c-.Fourloko", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771248726, "uuid": "e2ccb955-0b3b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.9.60/a-r.m-5.Fourloko", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771248727, "uuid": "e365d18f-0b3b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://si1h0uette-llnk.paw85silhouette.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771248727, "uuid": "e3689233-0b3b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.114.147/m-i.p-s.ISIS", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771248727, "uuid": "e36a2021-0b3b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://messageforms.com/m-p.s-l.ISIS", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771248738, "uuid": "ea4e2e22-0b3b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.161.142:46950/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771248743, "uuid": "ed044439-0b3b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.12.158:46824/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771248744, "uuid": "edb48404-0b3b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.191.223:41414/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771248877, "uuid": "3d20144f-0b3c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.76.120:56401/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771248917, "uuid": "5512deee-0b3c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.100.111:51624/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771249147, "uuid": "ddb0596a-0b3c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://p8x1m.stone48tyranny.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771249400, "uuid": "74ddb3eb-0b3d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.191.223:41414/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771249581, "uuid": "e07eaa74-0b3d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.64.93:50454/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771249866, "uuid": "8aa8c70c-0b3e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://monolith.stone48tyranny.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771250045, "uuid": "f52996c5-0b3e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://96.44.154.205/124/f238f8d87sd8f283fjhdsjhf23f928f9sd9f8s9d8f92893892.js", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771250046, "uuid": "f5fb3362-0b3e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://96.44.154.205/?&Rr%CA%80%D4%BB%E1%8F%92%E1%9A%B1%EF%BC%B2Rr%CA%80%D4%BB%E1%8F%92%E1%9A%B1%EF%BC%B2Rr%CA%80%D4%BB%E1%8F%92%E1%9A%B1%EF%BC%B2Rr%CA%80%D4%BB%E1%8F%92%E1%9A%B1%EF%BC%B2Rr%CA%80%D4%BB%E1%8F%92%E1%9A%B1%EF%BC%B2Rr%CA%80%D4%BB%E1%8F%92%E1%9A%B1%EF%BC%B2", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771250048, "uuid": "f6d5c023-0b3e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://usatodayssgirlsslek.net/ya/0sSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771250049, "uuid": "f75de406-0b3e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://96.44.154.205/156/23dsf343464645dfg456546456232dsff43453453f.js", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771250049, "uuid": "f7951bbb-0b3e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://ia600603.us.archive.org/13/items/msi-pro-with-b-64_202602/MSI_PRO_with_b64.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771250296, "uuid": "8aff29b6-0b3f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.207.214:56131/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771250467, "uuid": "f07ca5ba-0b3f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://st0ne-vvyrd.stone48tyranny.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771250710, "uuid": "815f7806-0b40-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8546428528/EE7OeTn.exe", "Tag": [ { "name": "dcrat", "colour": "#75ce72", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771250766, "uuid": "a32e0b7e-0b40-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://r2k6d.four486stop.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771250896, "uuid": "f0ac2120-0b40-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.34:52430/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771251140, "uuid": "81b0d90b-0b41-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.100.111:51624/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771251439, "uuid": "33f3b8fe-0b42-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.60.76:38769/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771251491, "uuid": "534978aa-0b42-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.60.76:38769/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771251668, "uuid": "bc555be5-0b42-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://waypoint.four486stop.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771251737, "uuid": "e5d3193c-0b42-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.238.54:46154/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771251798, "uuid": "0a56b5ac-0b43-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.68.203:42066/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771251799, "uuid": "0ad984c1-0b43-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.250.40:43577/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771251847, "uuid": "27669def-0b43-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://f0ur-rnark.four486stop.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771252026, "uuid": "92313985-0b43-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.34:52430/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771252088, "uuid": "b6c77a8b-0b43-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.53.236:43741/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771252209, "uuid": "ff2ff1b2-0b43-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://a5v9n.capitul98hypo.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771252445, "uuid": "8bf8b8dd-0b44-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://treatise.capitul98hypo.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771252631, "uuid": "fa555fed-0b44-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://hyp0-vvrite.capitul98hypo.coupons/webclient", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771252936, "uuid": "b06b8c77-0b45-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.17.81:53448/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771252986, "uuid": "ce02b87d-0b45-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://v1.bleuforet.coupons/sync", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771252997, "uuid": "d4dbe9dc-0b45-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.92.140.197:39480/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771253168, "uuid": "3a5e5b02-0b46-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.195.223:39444/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771253246, "uuid": "69323992-0b46-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.214.23.163:37613/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771253296, "uuid": "86c855a9-0b46-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.225.200:57424/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771253296, "uuid": "86ca380b-0b46-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.214.88.40:40177/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771253296, "uuid": "86cc71f9-0b46-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.60.224.87:57027/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771253356, "uuid": "aacddf1f-0b46-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.181.158:57996/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771253537, "uuid": "16c7d14d-0b47-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.68.203:42066/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771253596, "uuid": "3a06bd3c-0b47-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.3.227:55993/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771253776, "uuid": "a5172c2c-0b47-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.53.236:43741/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771253776, "uuid": "a51a247d-0b47-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.243.34:46448/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771253826, "uuid": "c2d4ba78-0b47-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://secure-cloud-link.bleuforet.coupons/sync", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771254128, "uuid": "770f3783-0b48-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn-b9.bleuforet.coupons/sync", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771254192, "uuid": "9d4b8424-0b48-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.221.142:60772/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771254428, "uuid": "29afc037-0b49-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.214.88.40:40177/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771254486, "uuid": "4c454629-0b49-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://ws.starkwind.coupons/sync", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771254487, "uuid": "4cf89e12-0b49-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.17.81:53448/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771254674, "uuid": "bc8c9d5b-0b49-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.182.70:56127/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771254907, "uuid": "46fee732-0b4a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://data-transfer-srv.starkwind.coupons/sync", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771254918, "uuid": "4d8e9201-0b4a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.225.200:57424/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771254976, "uuid": "707ab97d-0b4a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.175.139:35329/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771255034, "uuid": "92a862ad-0b4a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.214.23.163:37613/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771255266, "uuid": "1d32fdcf-0b4b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://node44.starkwind.coupons/sync", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771255397, "uuid": "6b8b2b63-0b4b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.148.8:36406/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771255457, "uuid": "8ec1648f-0b4b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.243.34:46448/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771255508, "uuid": "ad1e34d3-0b4b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://api.nuitetoile.coupons/sync", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771255629, "uuid": "f59ff4b3-0b4b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.189.ptr.pfcloud.network/HideChaotic/sora.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771255641, "uuid": "fc67736f-0b4b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.136.215:36624/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771255686, "uuid": "17b4b019-0b4c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.114.220:54585/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771255746, "uuid": "3b2cede2-0b4c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://external-web-node.nuitetoile.coupons/sync", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771256048, "uuid": "ef2f1297-0b4c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate-v7.nuitetoile.coupons/sync", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771256168, "uuid": "370dbba7-0b4d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.148.8:36406/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771256301, "uuid": "85ec7ff7-0b4d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.114.147/x-8.6-4.ISIS", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771256357, "uuid": "a7a6aedb-0b4d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.223.144.89:56240/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771256413, "uuid": "c8a2da20-0b4d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.75.70:49209/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771256466, "uuid": "e86b74bf-0b4d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.schnellauf.coupons/sync", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771256540, "uuid": "14c0a444-0b4e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.26.204:38495/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771256646, "uuid": "53e8c1ba-0b4e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://auth-global-zone.schnellauf.coupons/sync", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771256774, "uuid": "a018167f-0b4e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.175.139:35329/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771257027, "uuid": "36aa3fed-0b4f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.86.5:50831/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771257126, "uuid": "7202eae2-0b4f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://uri2df93.blue128cinder.digital/?=check&&actmn=iOMWxfPWFjgToGHe", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771257549, "uuid": "6ded47da-0b50-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.90/main_arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771257549, "uuid": "6dee2bc0-0b50-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.90/main_arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771257549, "uuid": "6df459ee-0b50-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.90/main_x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771257549, "uuid": "6dfbda07-0b50-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.90/main_sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771257549, "uuid": "6e12c8a7-0b50-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.114.220:54585/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771257618, "uuid": "96c9e652-0b50-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.90/main_x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771257618, "uuid": "96c9efbd-0b50-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.90/main_m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771257618, "uuid": "96cd0971-0b50-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://devc.ws/%D0%92%D0%BE%D0%BEtst%D0%B0%D1%80%D1%80%D0%B5%D0%B3yos%D1%8564.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: ryos", "colour": "#51c7ee", "exportable": true, "hide_tag": false }, { "name": "pw-ryos", "colour": "#201b00", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771257618, "uuid": "96cd49ae-0b50-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.90/main_arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771257619, "uuid": "97d139c1-0b50-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.90/main_ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771257619, "uuid": "97e5a20d-0b50-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://lun.technok.sbs/LunX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: lunex", "colour": "#cb4cba", "exportable": true, "hide_tag": false }, { "name": "pw-lunex", "colour": "#A9A8CD", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771257620, "uuid": "9885bd45-0b50-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cyx.technok.sbs/Cyrex.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: cyrex", "colour": "#c7fa8e", "exportable": true, "hide_tag": false }, { "name": "pw-cyrex", "colour": "#d542d1", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771257737, "uuid": "ddf87e2e-0b50-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.155.253:39393/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771257858, "uuid": "26237c70-0b51-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.155.253:39393/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771258267, "uuid": "1a31847d-0b52-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://app.vertjardin.coupons/sync", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771258269, "uuid": "1af35222-0b52-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://jyx7jwja.blue128cinder.digital/?=check&&actmn=CpJeGMHYfoTeGaXJ", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771258391, "uuid": "63c5d453-0b52-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.100.180:45797/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771258566, "uuid": "cbf39547-0b52-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://direct-access-point.vertjardin.coupons/sync", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771258811, "uuid": "5de5323b-0b53-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.37/bins/parm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771258876, "uuid": "84be5d5e-0b53-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.37/bins/parm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771258876, "uuid": "852bb803-0b53-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.27.164:40452/Mozi.7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771258935, "uuid": "a855971c-0b53-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.37/bins/parm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771258987, "uuid": "c6c5e65b-0b53-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.37/bins/parm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771259108, "uuid": "0f6f734a-0b54-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://edge-99.vertjardin.coupons/sync", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771259130, "uuid": "1c806b67-0b54-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://kittycom.doxxing.online/main_m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771259131, "uuid": "1cb52bb2-0b54-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://kittycom.doxxing.online/main_ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771259131, "uuid": "1cc28d64-0b54-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://kittycom.doxxing.online/main_arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771259131, "uuid": "1cd64145-0b54-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://kittycom.doxxing.online/main_arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771259131, "uuid": "1ce2a3ec-0b54-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://kittycom.doxxing.online/main_x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771259131, "uuid": "1cf57f4e-0b54-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://kittycom.doxxing.online/main_sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771259131, "uuid": "1d05e6de-0b54-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://kittycom.doxxing.online/main_x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771259131, "uuid": "1d152e93-0b54-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://kittycom.doxxing.online/main_arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771259469, "uuid": "e61e5908-0b54-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://u842.goldberg.coupons/09fa47a71346a", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771259478, "uuid": "ebdf47a5-0b54-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.3.159:51023/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771259826, "uuid": "bb1c24ac-0b55-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://xqz-p.goldberg.coupons/09fa47a71346a", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771260017, "uuid": "2ccbade7-0b56-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.73/i1XZQrSL.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771260029, "uuid": "34310c1c-0b56-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.210.157.113:23742/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771260436, "uuid": "26df5169-0b57-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.246.246:41347/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771260546, "uuid": "6821cfed-0b57-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://customer-ref-91.goldberg.coupons/09fa47a71346a", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771260615, "uuid": "918c5bf6-0b57-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.197.109:48267/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771260786, "uuid": "f77a130a-0b57-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://bnt11.mainsage.coupons/09fa47a71346a", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771261041, "uuid": "8f6f7e91-0b58-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.3.159:51023/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771261085, "uuid": "a9827b35-0b58-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://session-id-a9.mainsage.coupons/09fa47a71346a", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771261107, "uuid": "b6a56843-0b58-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://store-na-phx-5.gofile.io/download/direct/b8ee00e1-dd1d-4546-8948-bf3ba61cc137/Cakewallet.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "TrustConnect", "colour": "#EFEA3F", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771261387, "uuid": "5d6de75e-0b59-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://k-7.mainsage.coupons/09fa47a71346a", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771261807, "uuid": "57af4176-0b5a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://trck.zeitgeist.coupons/09fa47a71346a", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771261873, "uuid": "7f863e97-0b5a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.246.246:41347/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771262047, "uuid": "e707fac3-0b5a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://unique-set-02.zeitgeist.coupons/09fa47a71346a", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771262243, "uuid": "5be17917-0b5b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.42.89.150:56735/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771262285, "uuid": "74dc319c-0b5b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://andrefelipedonascime1768785037020.1552093.meusitehostgator.com.br/RBjtF_Meus_Arquivos_De_Texto/02.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771262287, "uuid": "75ca0487-0b5b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://andrefelipedonascime1768785037020.1552093.meusitehostgator.com.br/RBjtF_Meus_Arquivos_De_Texto/01.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771262289, "uuid": "774d105b-0b5b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastee.dev/d/w86oeGtn/0", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771262766, "uuid": "9377d09e-0b5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.26.129:21530/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771262766, "uuid": "93a7fa8d-0b5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://v-n-v.zeitgeist.coupons/09fa47a71346a", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771262945, "uuid": "fdf80ec8-0b5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/5926060486/JiBn9LM.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771263008, "uuid": "23920461-0b5d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-063eec1f9e5b40fb809e9cdf719e6add.r2.dev/yalx.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771263009, "uuid": "24282b86-0b5d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://humodin.lol/downloads", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: bluys", "colour": "#d0fede", "exportable": true, "hide_tag": false }, { "name": "pw-bluys", "colour": "#5a7771", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771263019, "uuid": "2a297a8a-0b5d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://joltarena.com/download-installer?name=8+Pool+Ball+Mod+Menu&year=", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: 050565", "colour": "#eb6d45", "exportable": true, "hide_tag": false }, { "name": "pw-050565", "colour": "#b9d102", "exportable": true, "hide_tag": false }, { "name": "vmprotect", "colour": "#07c2a8", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771263021, "uuid": "2b753ff3-0b5d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.51.48:55367/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771263027, "uuid": "2f020290-0b5d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://allcheat.netlify.app/rrExecute.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "karius", "colour": "#1b817c", "exportable": true, "hide_tag": false }, { "name": "ScarfaceStealer", "colour": "#660BB4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771263054, "uuid": "3f1c8aff-0b5d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://tpuexd-1362557240.cos.ap-hongkong.myqcloud.com/Chorme_Setup_1858_1.3.zip", "Tag": [ { "name": "farfli", "colour": "#622cad", "exportable": true, "hide_tag": false }, { "name": "Malgent", "colour": "#a071f9", "exportable": true, "hide_tag": false }, { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#2b8df4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771263248, "uuid": "b2cb7c46-0b5d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.207.2:55432/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771263665, "uuid": "ab9dfbe3-0b5e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-path-x.clairsol.coupons/09fa47a71346a", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771263669, "uuid": "adf091f7-0b5e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.134.87.108:45137/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771263726, "uuid": "cfb99ae2-0b5e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8349010648/HIYwJGW.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771263975, "uuid": "63e606a8-0b5f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://cnc.frtewq.online/HideChaotic/sora.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771263975, "uuid": "63e6c1fe-0b5f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://cnc.frtewq.online/HideChaotic/sora.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771263975, "uuid": "63e6c444-0b5f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://cnc.frtewq.online/HideChaotic/sora.arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771263975, "uuid": "63e9b057-0b5f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://cnc.frtewq.online/HideChaotic/sora.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771263975, "uuid": "63e9b538-0b5f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://cnc.frtewq.online/HideChaotic/sora.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771263975, "uuid": "63ef395e-0b5f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://cnc.frtewq.online/HideChaotic/sora.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771264870, "uuid": "797393b9-0b61-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://cnc.frtewq.online/HideChaotic/sora.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771264870, "uuid": "7983e688-0b61-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://cnc.frtewq.online/ohshit.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771264870, "uuid": "7988f197-0b61-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://cnc.frtewq.online/HideChaotic/sora.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771264870, "uuid": "798eae32-0b61-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.32.192:60113/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771264870, "uuid": "798eaeec-0b61-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.51.48:55367/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771264870, "uuid": "799ad229-0b61-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://z99.clairsol.coupons/09fa47a71346a", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771264870, "uuid": "79a740da-0b61-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.48.44:33148/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771264938, "uuid": "a1e49ffb-0b61-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://cnc.frtewq.online/HideChaotic/sora.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771264940, "uuid": "a3853851-0b61-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://cnc.frtewq.online/HideChaotic/sora.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771264943, "uuid": "a5254710-0b61-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://cnc.frtewq.online/HideChaotic/sora.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771264990, "uuid": "c10261bf-0b61-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.217/bins/parm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771264990, "uuid": "c109495f-0b61-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.217/bins/pm68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771264992, "uuid": "c247802c-0b61-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.217/bins/psh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771264992, "uuid": "c247e945-0b61-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.217/bins/pmips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771264992, "uuid": "c24d81c0-0b61-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.217/bins/px86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771264992, "uuid": "c264af29-0b61-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.217/bins/pmpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771265057, "uuid": "e8d7c3c5-0b61-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.217/bins/pppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771265057, "uuid": "e8d7ecea-0b61-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.217/bins/parm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771265057, "uuid": "e8d98189-0b61-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.217/bins/parm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771265117, "uuid": "0cd3b680-0b62-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.131.163.246:47476/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771265169, "uuid": "2ba1aee5-0b62-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.187.101.203:38703/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771265236, "uuid": "53ef6779-0b62-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.193.22:52172/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771265464, "uuid": "dbe13f84-0b62-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://p-link.eisenherz.coupons/09fa47a71346a", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771265474, "uuid": "e169c4fb-0b62-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.198.254:36568/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771265528, "uuid": "0198d672-0b63-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.10.96:33113/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771266621, "uuid": "8d5a6a55-0b65-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.240.196:33472/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771267102, "uuid": "abc4ca01-0b66-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.164.130:57925/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771267694, "uuid": "0cabd002-0b68-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.102.202:44497/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771267756, "uuid": "31e27ea7-0b68-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.102.202:44497/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771268407, "uuid": "b60afafe-0b69-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8366207456/jtauUdV.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771268961, "uuid": "0034522a-0b6b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.164.130:57925/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771269753, "uuid": "d7f8a7f4-0b6c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.5.188:41768/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771270342, "uuid": "372f9060-0b6e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.244.227:37626/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771270342, "uuid": "373946c8-0b6e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.244.227:37626/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771270579, "uuid": "c43ad2ba-0b6e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.238.54:46154/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771270703, "uuid": "0e7735e6-0b6f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.75.110:44559/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771270947, "uuid": "9fe85d43-0b6f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.16.46:48302/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771270989, "uuid": "b919f206-0b6f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.235.70:38988/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771271106, "uuid": "fea18ca7-0b6f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://proc-9-auth.browser-crash-report.coupons/09fa47a71346a", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771271360, "uuid": "95c2c024-0b70-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.77.17:48570/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771271586, "uuid": "1c835357-0b71-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://x8.browser-crash-report.coupons/09fa47a71346a", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771272195, "uuid": "879654a6-0b72-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.166.77.246:36984/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771272428, "uuid": "127bc50b-0b73-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://v-ref.telemetry-api-v1.coupons/09fa47a71346a", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771272666, "uuid": "a0522328-0b73-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.29/3", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771272854, "uuid": "10258888-0b74-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.235.70:38988/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771273053, "uuid": "86f815ef-0b74-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.61.11:33685/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771273206, "uuid": "e2684b1f-0b74-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://session-8201.telemetry-api-v1.coupons/09fa47a71346a", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771273754, "uuid": "28d005d6-0b76-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.175.220:39157/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771273866, "uuid": "6be6b8d3-0b76-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/748049926/ka0OL2S.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "SystemBC", "colour": "#a79cf9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771273926, "uuid": "8f819b14-0b76-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://z-node.telemetry-api-v1.coupons/09fa47a71346a", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771274054, "uuid": "db77ca6f-0b76-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.10.95:49065/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771274177, "uuid": "25026fdb-0b77-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.166.77.246:36984/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771274286, "uuid": "65b65626-0b77-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://m-91.stackdump-collector.coupons/09fa47a71346a", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771274718, "uuid": "673a4d20-0b78-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.77.17:48570/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771275020, "uuid": "1b58e3be-0b79-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.46.244:51189/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771275306, "uuid": "c61c47d6-0b79-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://unique-trace-id.stackdump-collector.coupons/09fa47a71346a", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771275726, "uuid": "c03c2a5a-0b7a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://b-3.stackdump-collector.coupons/09fa47a71346a", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771275727, "uuid": "c0ba8c4c-0b7a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.175.220:39157/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771276085, "uuid": "963e302b-0b7b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://user29.debug-edge-cases.coupons/09fa47a71346a", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771276460, "uuid": "758c5681-0b7c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.173.202:32870/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771276567, "uuid": "b5629c2b-0b7c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://gateway-node-x.debug-edge-cases.coupons/09fa47a71346a", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771276695, "uuid": "01c491d0-0b7d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.188.140:41196/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771277107, "uuid": "f77efa05-0b7d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://p77.debug-edge-cases.coupons/09fa47a71346a", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771277358, "uuid": "8cf8f77f-0b7e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.173.225:43244/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771277416, "uuid": "afc29acd-0b7e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.88.247:40601/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771277466, "uuid": "cd4294b2-0b7e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://q-set.extension-health-sync.coupons/09fa47a71346a", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771278188, "uuid": "7be8ac58-0b80-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.188.140:41196/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771278429, "uuid": "0b301bd5-0b81-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://sync-v-8.extension-health-sync.coupons/09fa47a71346a", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771278675, "uuid": "9e45ba13-0b81-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.88.247:40601/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771278849, "uuid": "05a2c8a6-0b82-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.252.202:60671/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771279334, "uuid": "26870b85-0b83-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.48.44:33148/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771279565, "uuid": "b0859a62-0b83-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://r12.extension-health-sync.coupons/09fa47a71346a", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771279575, "uuid": "b68d4784-0b83-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.106.148:42746/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771279576, "uuid": "b735c1cc-0b83-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.243.128:58921/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771279875, "uuid": "694f4943-0b84-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/qrjqtxdcxn.exe", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771279939, "uuid": "8f31f681-0b84-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.234.46:42333/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771280108, "uuid": "f3e5e135-0b84-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://log33.syslog-remote-buffer.coupons/09fa47a71346a", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771280176, "uuid": "1c9faa49-0b85-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.243.128:58921/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771280296, "uuid": "6458fde8-0b85-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.23.52:32887/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771280526, "uuid": "ed7ff48d-0b85-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://buffer-temp-a.syslog-remote-buffer.coupons/09fa47a71346a", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771280591, "uuid": "13e0858b-0b86-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.195.223:39444/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771280707, "uuid": "59442bab-0b86-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://w-4.syslog-remote-buffer.coupons/09fa47a71346a", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771280886, "uuid": "c3ca6340-0b86-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://t-9.dev-trace-analyzer.coupons/09fa47a71346a", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771281379, "uuid": "e996f3de-0b87-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.220.104:32784/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771281668, "uuid": "9624e602-0b88-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.32.63.56:41730/Mozi.7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771281670, "uuid": "96fa482f-0b88-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.43.29:41681/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771281725, "uuid": "b7d8b0d8-0b88-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://report-stream-55.dev-trace-analyzer.coupons/handler", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771281856, "uuid": "05f0eff7-0b89-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.23.52:32887/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771281976, "uuid": "4d55eb0b-0b89-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.241.179:42581/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771281976, "uuid": "4d5793d8-0b89-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.241.179:42581/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771282518, "uuid": "90c80cb2-0b8a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.220.104:32784/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771283056, "uuid": "d13dfb4d-0b8b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.43.29:41681/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771283236, "uuid": "3c746efb-0b8c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.58.152:57128/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771283300, "uuid": "62a34fc4-0b8c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.9.137:33125/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771283469, "uuid": "c76b7389-0b8c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.202.108:39865/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771283588, "uuid": "0e9534c1-0b8d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.204.238.25:48225/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771284007, "uuid": "080d3907-0b8e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.250.94:41916/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771284430, "uuid": "0406c558-0b8f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://blueocean.endpoint-metrics-internal.coupons/handler", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771284487, "uuid": "261853d8-0b8f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://0bz6vz64.blue128cinder.digital/?=check&&actmn=vMUywRSJneoRukxU", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771284727, "uuid": "b531f3cd-0b8f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.79.84:33390/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771285035, "uuid": "6c973267-0b90-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.58.152:57128/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771285155, "uuid": "b449b40d-0b90-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.250.94:41916/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771285156, "uuid": "b4c76018-0b90-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.202.108:39865/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771285265, "uuid": "f5f957ed-0b90-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://silverleaf.endpoint-metrics-internal.coupons/handler", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771285333, "uuid": "1e836ebe-0b91-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.3.227:55993/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771285758, "uuid": "1bc1facb-0b92-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.9.145:40013/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771285928, "uuid": "8162e7b7-0b92-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://brightstar.endpoint-metrics-internal.coupons/handler", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286255, "uuid": "43cbeec8-0b93-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.142.8:43036/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286292, "uuid": "59df8e38-0b93-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.79.84:33390/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286293, "uuid": "5a963b65-0b93-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.56.2.220:57497/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286346, "uuid": "7a19a327-0b93-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://greenforest.runtime-error-handler.coupons/handler", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771284485, "uuid": "24c2ac5a-0b8f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "0bz6vz64.blue128cinder.digital" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771228265, "uuid": "3f368882-0b0c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.181.158.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229105, "uuid": "3444ec9b-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.56.149.224", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771217764, "uuid": "cc6ca9ae-0af3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.156.98.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771235224, "uuid": "733e7ef9-0b1c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.56.148.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771233844, "uuid": "3cf07b62-0b19-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.246.225.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771220764, "uuid": "c86b3f21-0afa-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.102.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771218605, "uuid": "c1b8de16-0af5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.254.249.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771228866, "uuid": "a59631af-0b0d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.231.233.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771232825, "uuid": "dd275636-0b16-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.0.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771225864, "uuid": "a84728e3-0b06-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.22.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771210864, "uuid": "bbbeec00-0ae3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.64.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771224485, "uuid": "72139aec-0b03-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.223.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771260424, "uuid": "1f6f5259-0b57-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.246.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771238285, "uuid": "93a406a6-0b23-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.46.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771263005, "uuid": "21fb1129-0b5d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.51.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771270324, "uuid": "2c7ac25d-0b6e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.244.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229645, "uuid": "75950ad0-0b0f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.148.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771228445, "uuid": "aa6b63f7-0b0c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.84.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771241283, "uuid": "8ee85889-0b2a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.88.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771253285, "uuid": "80468348-0b46-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.60.224.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771220706, "uuid": "a5a772a8-0afa-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.214.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771270924, "uuid": "9220e2ae-0b6f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.16.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771201324, "uuid": "8585b83f-0acd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.139.105.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286224, "uuid": "3188b836-0b93-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.142.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771232165, "uuid": "540ac116-0b15-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.11.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771269724, "uuid": "c7054bbc-0b6c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.5.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771257006, "uuid": "2a35133c-0b4f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.86.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771206664, "uuid": "f4236483-0ad9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.91.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203244, "uuid": "fde60921-0ad1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.57.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771273024, "uuid": "75af02dd-0b74-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.61.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771206065, "uuid": "8f01493a-0ad8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.237.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771243806, "uuid": "6e333d71-0b30-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.238.254", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771227065, "uuid": "741d22ce-0b09-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.67.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771240865, "uuid": "95745ef4-0b29-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.80.221.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771218544, "uuid": "9d07bacf-0af5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.116.38.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771245185, "uuid": "a47a9634-0b33-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.117.161.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286284, "uuid": "555e6209-0b93-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.56.2.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771227665, "uuid": "d98500c2-0b0a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.12.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771281964, "uuid": "46abffdc-0b89-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.241.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771244105, "uuid": "20af6fd9-0b31-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.75.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771284724, "uuid": "b37e93f0-0b8f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.79.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229464, "uuid": "0a37c661-0b0f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.17.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771239725, "uuid": "edd52b7f-0b26-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.188.83.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771243806, "uuid": "6e3358e1-0b30-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.209.109.128", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771243806, "uuid": "6e33aa54-0b30-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.209.68.12", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771220465, "uuid": "161a1f2f-0afa-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.126.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771228445, "uuid": "aa6b2557-0b0c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.101.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771263664, "uuid": "aabd56de-0b5e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.134.87.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771252984, "uuid": "cce1e9e5-0b45-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.92.140.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771223045, "uuid": "182ccfc1-0b00-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.26.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771275006, "uuid": "12e39613-0b79-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.46.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771243806, "uuid": "6e31e32e-0b30-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "134.236.150.80", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771247765, "uuid": "a5f9cc6e-0b39-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "172.86.114.147", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771201024, "uuid": "d29a0143-0acc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.150.80.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771272184, "uuid": "815e2076-0b72-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.166.77.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771233245, "uuid": "d776f938-0b17-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.175.13.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771243806, "uuid": "6e31f6be-0b30-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.206.152.28", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229106, "uuid": "345a3a50-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.132.118", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771257544, "uuid": "6ae0f390-0b50-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.132.90", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771258806, "uuid": "5b305631-0b53-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.37", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771255627, "uuid": "f465fa51-0b4b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.148.189.ptr.pfcloud.network" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771243624, "uuid": "02188166-0b30-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.206.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771243745, "uuid": "49d5bb3d-0b30-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.207.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771209184, "uuid": "d230279b-0adf-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.223.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771253285, "uuid": "80466bca-0b46-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.225.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771259464, "uuid": "e3a0898c-0b54-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.3.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771201625, "uuid": "38688e8c-0ace-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.4.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771204504, "uuid": "eceff90d-0ad4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.112.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771251786, "uuid": "02c4a153-0b43-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.250.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771209184, "uuid": "d2311195-0adf-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.48.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771216025, "uuid": "bf863678-0aef-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.53.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771257724, "uuid": "d62d6a9c-0b50-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.155.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771206185, "uuid": "d6645283-0ad8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.46.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771270985, "uuid": "b644c2ae-0b6f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.235.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202644, "uuid": "98060816-0ad0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.17.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771239665, "uuid": "ca17ba9c-0b26-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.247.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771276684, "uuid": "fb41cd71-0b7c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.188.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771223584, "uuid": "593800b3-0b01-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.246.6.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771219685, "uuid": "44f19107-0af8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "188.208.150.65", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771253285, "uuid": "804649ea-0b46-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "203.214.88.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771276444, "uuid": "6bf6e2ee-0b7c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.154.173.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771237205, "uuid": "10018f24-0b21-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.202.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771220706, "uuid": "a5a77365-0afa-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.211.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771279925, "uuid": "86f1a780-0b84-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.234.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771227065, "uuid": "741d0b4d-0b09-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.0.120.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771213984, "uuid": "ff453510-0aea-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.14.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771252924, "uuid": "a92d2475-0b45-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.17.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771232345, "uuid": "bee95d90-0b15-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.20.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771237024, "uuid": "a44b1f76-0b20-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.23.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771280284, "uuid": "5cfdf271-0b85-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.23.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203844, "uuid": "638c5427-0ad3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.202.213.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771253164, "uuid": "382bd592-0b46-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.195.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771281364, "uuid": "e0b974cf-0b87-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.220.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771254964, "uuid": "695ba148-0b4a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.175.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771253225, "uuid": "5c950c7d-0b46-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.214.23.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771253345, "uuid": "a424d08d-0b46-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.181.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771215964, "uuid": "9b83f1e3-0aef-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.223.169.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771256525, "uuid": "0b5fcffe-0b4e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.26.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771231025, "uuid": "ac1cce59-0b12-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.26.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771251724, "uuid": "de2a8be7-0b42-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.70.238.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771203724, "uuid": "1b8fce56-0ad3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.221.66.75", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771237387, "uuid": "7c3eeef6-0b21-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "3aofxgg5.orbit44kind.digital" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771273744, "uuid": "22d4e301-0b76-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.175.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771279564, "uuid": "afa871ff-0b83-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.243.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771240624, "uuid": "05a1614f-0b29-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.37.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771207206, "uuid": "375b27de-0adb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.100.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771266605, "uuid": "83b66178-0b65-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.240.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771207744, "uuid": "781b9b03-0adc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.36.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771210145, "uuid": "0ed11c07-0ae2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.233.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771236245, "uuid": "d39c728e-0b1e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.150.236", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771223107, "uuid": "3d076d93-0b00-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.233.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771267685, "uuid": "076033bb-0b68-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.102.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771222684, "uuid": "40d82d2a-0aff-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.44.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771283284, "uuid": "590aa45c-0b8c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.237.9.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771236245, "uuid": "d39b6a49-0b1e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.168.239", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771278844, "uuid": "02c4f944-0b82-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.252.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771204563, "uuid": "0ff2f76b-0ad5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.72.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771248725, "uuid": "e230efd9-0b3b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.191.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771207143, "uuid": "11d4e492-0adb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.74.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771234027, "uuid": "a9b219f5-0b19-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.53.22.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771265463, "uuid": "db06fe76-0b62-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.57.198.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771215785, "uuid": "305ee2a9-0aef-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.57.37.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771248844, "uuid": "296f6f4e-0b3c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.59.76.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771255684, "uuid": "163e6ef9-0b4c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.87.114.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771277344, "uuid": "84ce3e6a-0b7e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.87.173.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771236245, "uuid": "d39a610a-0b1e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.144.64.166", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771236245, "uuid": "d39d8338-0b1e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.184.179.197", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771248725, "uuid": "e22d7461-0b3b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.88.9.60", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771262225, "uuid": "50dbffc4-0b5b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.42.89.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202405, "uuid": "097dfdfa-0ad0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.253.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771217344, "uuid": "d1e89d13-0af2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.251.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771217225, "uuid": "8b08be46-0af2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.98.125.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771234624, "uuid": "0dcb400a-0b1b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.19.212.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771254185, "uuid": "9891ee15-0b48-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.19.221.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771220405, "uuid": "f28a00c4-0af9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.97.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771219506, "uuid": "daa3b2a1-0af7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.158.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771247466, "uuid": "f3ba40a7-0b38-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.12.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771243806, "uuid": "6e33203a-0b30-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.189.128.173", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771260005, "uuid": "26198668-0b56-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.210.157.113", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771238764, "uuid": "b104e24d-0b24-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.247.88.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771243806, "uuid": "6e334f8f-0b30-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.224.156.200", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771236124, "uuid": "8b89edcd-0b1e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "84.15.155.121", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229045, "uuid": "103b59c2-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.92.242.240", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771264985, "uuid": "bdf95cdc-0b61-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.156.152.217", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771281664, "uuid": "93ac0781-0b88-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "95.32.63.56", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771252207, "uuid": "fdee0179-0b43-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "a5v9n.capitul98hypo.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771200665, "uuid": "fc35ff32-0acb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "andrefelipedonascime1768785037020.1552093.meusitehostgator.com.br" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771255506, "uuid": "abef1c44-0b4b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "api.nuitetoile.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771217285, "uuid": "aea7d0be-0af2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "api.orbit6crate.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771258264, "uuid": "17e88304-0b52-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "app.vertjardin.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771230667, "uuid": "d72a4419-0b11-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "atelier.blu45modern.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229111, "uuid": "3798d5c8-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "atofielshd.vercel.app" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771256645, "uuid": "52f4a420-0b4e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "auth-global-zone.schnellauf.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771275724, "uuid": "bf5422d8-0b7a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "b-3.stackdump-collector.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771233307, "uuid": "fcc531d1-0b17-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "be1ieve-vvave.believein41fant.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771284426, "uuid": "021a74c6-0b8f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "blueocean.endpoint-metrics-internal.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771260785, "uuid": "f6bedfec-0b57-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "bnt11.mainsage.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771285925, "uuid": "7f465e9c-0b92-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "brightstar.endpoint-metrics-internal.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771280525, "uuid": "ec870512-0b85-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "buffer-temp-a.syslog-remote-buffer.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771245245, "uuid": "c8364975-0b33-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "c9t5q.paw85silhouette.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229110, "uuid": "36bab0c4-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "candacradhd.vercel.app" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771214644, "uuid": "88d96317-0aec-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "cdn-b12.nifty4locker.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771254125, "uuid": "74fc9235-0b48-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "cdn-b9.bleuforet.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771225385, "uuid": "8a9b580d-0b05-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "cloud-m3.plum5parcel.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771263964, "uuid": "5ddfe801-0b5f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "cnc.frtewq.online" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771245905, "uuid": "51d0abd7-0b35-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "contour.paw85silhouette.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771260544, "uuid": "672b2164-0b57-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "customer-ref-91.goldberg.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771257605, "uuid": "8f802e95-0b50-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "cyx.technok.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229047, "uuid": "118f0d19-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "cyx.technol.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771204085, "uuid": "f2eb25b0-0ad3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "data-flow-central.amber9stash.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771254905, "uuid": "4625494c-0b4a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "data-transfer-srv.starkwind.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771258564, "uuid": "caf33bcd-0b52-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "direct-access-point.vertjardin.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771242605, "uuid": "a2bb8d16-0b2d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "dispatch.reporter9speck.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771222144, "uuid": "ff33adbd-0afd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "dl.plum5parcel.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771256464, "uuid": "e755dc28-0b4d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "dl.schnellauf.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771259107, "uuid": "0e7f6f4a-0b54-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "edge-99.vertjardin.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771245606, "uuid": "9f760d3d-0b34-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "eishin-kk-co.asia" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771255744, "uuid": "3a2cb175-0b4c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "external-web-node.nuitetoile.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771251846, "uuid": "267c079c-0b43-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "f0ur-rnark.four486stop.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771263664, "uuid": "aade7158-0b5e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-path-x.clairsol.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771221005, "uuid": "580f8f9f-0afb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate-07.orbit6crate.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771256045, "uuid": "ed3872b1-0b4c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate-v7.nuitetoile.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771276565, "uuid": "b42d586f-0b7c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "gateway-node-x.debug-edge-cases.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771218845, "uuid": "507fdc24-0af6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "global-sync-srv.orbit6crate.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286344, "uuid": "793ac45e-0b93-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "greenforest.runtime-error-handler.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771232885, "uuid": "00ca4bda-0b17-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "horizon.believein41fant.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771263007, "uuid": "2353980b-0b5d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "humodin.lol" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771252627, "uuid": "f7f9e90a-0b44-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "hyp0-vvrite.capitul98hypo.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771250045, "uuid": "f4eab6ca-0b3e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "ia600603.us.archive.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771236124, "uuid": "8b952aa1-0b1e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "infinitaki.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771223824, "uuid": "e8623d16-0b01-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "internal-web-proxy.plum5parcel.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771263005, "uuid": "220cf4dd-0b5d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "joltarena.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771258266, "uuid": "1917e881-0b52-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "jyx7jwja.blue128cinder.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771261385, "uuid": "5c42d7b8-0b59-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "k-7.mainsage.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771237387, "uuid": "7c3ff324-0b21-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "kh10p0-rnate.khlopotun6turn.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771259107, "uuid": "0e7824e1-0b54-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "kittycom.doxxing.online" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771239065, "uuid": "648a3a9b-0b25-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "ledger.pitman123wid.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771280106, "uuid": "f2f9951a-0b84-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "log33.syslog-remote-buffer.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771257605, "uuid": "8f80efd8-0b50-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "lun.technok.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229045, "uuid": "104d2e4e-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "luq.technol.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771274284, "uuid": "64c2e872-0b77-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "m-91.stackdump-collector.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229113, "uuid": "387f06ac-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "m.jkoa.co.kr" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771236124, "uuid": "8b9d6793-0b1e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "m.meta-dm.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771231025, "uuid": "ac2e0bda-0b12-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "m0d-rnflux.blu45modern.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771238105, "uuid": "28a768ce-0b23-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "m9r3p.pitman123wid.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771247765, "uuid": "a61332e6-0b39-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "messageforms.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771249865, "uuid": "89ebc08d-0b3e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "monolith.stone48tyranny.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771231566, "uuid": "eea9c1a8-0b13-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "msidownloads.duckdns.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771210265, "uuid": "568e0a7b-0ae2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "node-v99.amber9stash.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771255264, "uuid": "1c30eaca-0b4b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "node44.starkwind.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771265463, "uuid": "db1698fe-0b62-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "p-link.eisenherz.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771240564, "uuid": "e2615b81-0b28-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "p1trnan-vvex.pitman123wid.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771277105, "uuid": "f6158f5a-0b7d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "p77.debug-edge-cases.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771249144, "uuid": "dc629685-0b3c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "p8x1m.stone48tyranny.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771271105, "uuid": "fdcc07f0-0b6f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "proc-9-auth.browser-crash-report.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771263005, "uuid": "2212b7b1-0b5d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-063eec1f9e5b40fb809e9cdf719e6add.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771277465, "uuid": "cc9aa027-0b7e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "q-set.extension-health-sync.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771231566, "uuid": "ee9816b1-0b13-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "q4m8v.believein41fant.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771279564, "uuid": "afb9e28c-0b83-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "r12.extension-health-sync.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771250765, "uuid": "a27c277b-0b40-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "r2k6d.four486stop.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771243145, "uuid": "e46cb1cf-0b2e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "rep0rt-rnix.reporter9speck.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771281724, "uuid": "b7234247-0b88-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "report-stream-55.dev-trace-analyzer.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771202285, "uuid": "c1df4e28-0acf-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "s3.amber9stash.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771213746, "uuid": "717bb450-0aea-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "secure-access-point.nifty4locker.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771253825, "uuid": "c2154d2e-0b47-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "secure-cloud-link.bleuforet.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771273204, "uuid": "e1525679-0b74-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "session-8201.telemetry-api-v1.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771261084, "uuid": "a8d75400-0b58-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "session-id-a9.mainsage.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771248725, "uuid": "e244f64f-0b3b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "si1h0uette-llnk.paw85silhouette.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771285264, "uuid": "f54c9bb1-0b90-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "silverleaf.endpoint-metrics-internal.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771250465, "uuid": "ef504fb8-0b3f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "st0ne-vvyrd.stone48tyranny.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771261084, "uuid": "a8d5d718-0b58-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "store-na-phx-5.gofile.io" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771236124, "uuid": "8b99824a-0b1e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "superbet388.one" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771278425, "uuid": "08e558ab-0b81-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "sync-v-8.extension-health-sync.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771280885, "uuid": "c3203c75-0b86-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "t-9.dev-trace-analyzer.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771234384, "uuid": "7ebf13b0-0b1a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "t6k2n.khlopotun6turn.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771263007, "uuid": "22f88482-0b5d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "tpuexd-1362557240.cos.ap-hongkong.myqcloud.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771261805, "uuid": "56c56801-0b5a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "trck.zeitgeist.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771252444, "uuid": "8b46bbba-0b44-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "treatise.capitul98hypo.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771259465, "uuid": "e3cddb7b-0b54-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "u842.goldberg.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771262044, "uuid": "e524eac4-0b5a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "unique-set-02.zeitgeist.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771275305, "uuid": "c56ea572-0b79-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "unique-trace-id.stackdump-collector.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771257124, "uuid": "7095dc2c-0b4f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "uri2df93.blue128cinder.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771250044, "uuid": "f4dc2b11-0b3e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "usatodayssgirlsslek.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771276084, "uuid": "957fa718-0b7b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "user29.debug-edge-cases.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771229110, "uuid": "37293d59-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "uyrhfkkfbf.vercel.app" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771262765, "uuid": "92a16bf1-0b5c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "v-n-v.zeitgeist.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771272426, "uuid": "1192f6f5-0b73-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "v-ref.telemetry-api-v1.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771252984, "uuid": "cceec74e-0b45-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "v1.bleuforet.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771280706, "uuid": "586ca19d-0b86-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "w-4.syslog-remote-buffer.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771251664, "uuid": "ba6b5349-0b42-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "waypoint.four486stop.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771234866, "uuid": "9d92861d-0b1b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "workshop.khlopotun6turn.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771212665, "uuid": "ecf304ef-0ae7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "ws.nifty4locker.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771254484, "uuid": "4b19f8ba-0b49-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "ws.starkwind.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771244885, "uuid": "f1885be8-0b32-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.up3me.cc" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771228625, "uuid": "160a7a42-0b0d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "x7p9a.blu45modern.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771271584, "uuid": "1bb3f6f3-0b71-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "x8.browser-crash-report.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771259824, "uuid": "ba0dc6a5-0b55-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "xqz-p.goldberg.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771273925, "uuid": "8ec8c270-0b76-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "z-node.telemetry-api-v1.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771241225, "uuid": "6c5a6a70-0b2a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "z3n7a.reporter9speck.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771264865, "uuid": "76bf4983-0b61-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "z99.clairsol.coupons" } ] } }